diff options
| author | Zihan Xi <zihanx@nebusec.ai> | 2026-09-16 15:29:26 +0000 |
|---|---|---|
| committer | Paulo Alcantara <pc@manguebit.org> | 2026-09-21 21:40:17 -0300 |
| commit | 566820af017e81497fb5e9d3ad6e7ffe2828bc8b (patch) | |
| tree | 38da170b7734fdf32955bddb4328967e7e123337 /tools/perf/scripts/python/bin/stackcollapse-report | |
| parent | fa2e9900dd2a3f5a1e7ef5a8c5e8d435feedbfcc (diff) | |
| download | linux-next-566820af017e81497fb5e9d3ad6e7ffe2828bc8b.tar.gz linux-next-566820af017e81497fb5e9d3ad6e7ffe2828bc8b.zip | |
smb: client: close handle after create-context parsing failure
SMB2_open() accounts a successful CREATE response as a remote open before
parsing its create contexts. If smb2_parse_contexts() rejects malformed
context data, SMB2_open() returns without closing the handle, leaving the
server-side handle open and num_remote_opens elevated.
Close the handle after a post-CREATE context parsing failure so the error
path releases the remote resource and balances the open count.
Fixes: af1689a9b770 ("smb: client: fix potential OOBs in smb2_parse_contexts()")
Cc: stable@vger.kernel.org
Reported-by: Vega <vega@nebusec.ai>
Assisted-by: LLM
Co-developed-by: Luxing Yin <root@tr0jan.top>
Signed-off-by: Luxing Yin <root@tr0jan.top>
Signed-off-by: Zihan Xi <zihanx@nebusec.ai>
Tested-by: Frank Sorenson <sorenson@redhat.com>
Signed-off-by: Paulo Alcantara <pc@manguebit.org>
Diffstat (limited to 'tools/perf/scripts/python/bin/stackcollapse-report')
0 files changed, 0 insertions, 0 deletions