Skip to content

Commit 70bccd9

Browse files
Makar Semyonovsmfrench
authored andcommitted
cifs: prevent NULL pointer dereference in UTF16 conversion
There can be a NULL pointer dereference bug here. NULL is passed to __cifs_sfu_make_node without checks, which passes it unchecked to cifs_strndup_to_utf16, which in turn passes it to cifs_local_to_utf16_bytes where '*from' is dereferenced, causing a crash. This patch adds a check for NULL 'src' in cifs_strndup_to_utf16 and returns NULL early to prevent dereferencing NULL pointer. Found by Linux Verification Center (linuxtesting.org) with SVACE Signed-off-by: Makar Semyonov <[email protected]> Cc: [email protected] Signed-off-by: Steve French <[email protected]>
1 parent 91be128 commit 70bccd9

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

fs/smb/client/cifs_unicode.c

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -629,6 +629,9 @@ cifs_strndup_to_utf16(const char *src, const int maxlen, int *utf16_len,
629629
int len;
630630
__le16 *dst;
631631

632+
if (!src)
633+
return NULL;
634+
632635
len = cifs_local_to_utf16_bytes(src, maxlen, cp);
633636
len += 2; /* NULL */
634637
dst = kmalloc(len, GFP_KERNEL);

0 commit comments

Comments
 (0)