Tim Gardner 0c26606cbe cifs: ntstatus_to_dos_map[] is not terminated
Functions that walk the ntstatus_to_dos_map[] array could
run off the end. For example, ntstatus_to_dos() loops
while ntstatus_to_dos_map[].ntstatus is not 0. Granted,
this is mostly theoretical, but could be used as a DOS attack
if the error code in the SMB header is bogus.

[Might consider adding to stable, as this patch is low risk - Steve]

Reviewed-by: Jeff Layton <jlayton@redhat.com>
Signed-off-by: Tim Gardner <tim.gardner@canonical.com>
Signed-off-by: Steve French <smfrench@gmail.com>
2013-10-14 12:14:01 -05:00
..
2013-09-25 19:01:27 -05:00
2013-09-21 10:36:10 -05:00
2013-06-26 23:45:05 -05:00
2013-09-08 14:27:34 -05:00
2013-09-21 10:36:10 -05:00
2007-06-05 18:30:44 +00:00
2013-06-26 23:45:05 -05:00
2012-07-24 10:25:13 -05:00
2013-09-08 14:54:24 -05:00