Namjae JeonandSteve French e8bb506e6e ksmbd: use memcmp() to compare ClientGUIDs ...

ClientGUID is a fixed-size binary value and can contain embedded NUL
bytes. strncmp() stops comparing at the first NUL byte, so different
ClientGUID values can incorrectly be treated as equal.

Use memcmp() in SMB3 multichannel session binding and
FSCTL_VALIDATE_NEGOTIATE_INFO to compare all SMB2_CLIENT_GUID_SIZE
bytes.

Fixes: f5a544e3ba ("ksmbd: add support for SMB3 multichannel")
Fixes: e2f34481b2 ("cifsd: add server-side procedures for SMB3")
Reported-by: Samu <nomomentomori@gmail.com>
Suggested-by: Samu <nomomentomori@gmail.com>
Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
Signed-off-by: Steve French <stfrench@microsoft.com>

2026-07-30 18:45:57 -05:00

..

mgmt

ksmbd: remove stale channels from all sessions on teardown

2026-07-16 10:18:25 -05:00

asn1.c

…

asn1.h

…

auth.c

ksmbd: handle channel binding with a different user

2026-07-06 07:55:41 -05:00

auth.h

ksmbd: fix multichannel binding and enforce channel limit

2026-07-06 07:55:41 -05:00

compress.c

ksmbd: reject undersized decompressed SMB2 requests

2026-07-22 09:54:10 -05:00

compress.h

ksmbd: compress SMB2 READ responses

2026-06-16 18:57:22 -05:00

connection.c

ksmbd: validate minimum PDU size for transform requests

2026-07-22 09:54:10 -05:00

connection.h

ksmbd: reject repeated SMB2 NEGOTIATE requests

2026-07-30 18:45:57 -05:00

crypto_ctx.c

…

crypto_ctx.h

…

glob.h

…

Kconfig

…

ksmbd_netlink.h

…

ksmbd_spnego_negtokeninit.asn1

…

ksmbd_spnego_negtokentarg.asn1

…

ksmbd_work.c

ksmbd: keep common response iovecs in the work item

2026-06-22 20:15:04 -05:00

ksmbd_work.h

ksmbd: fix outstanding credit leak on abort and error paths

2026-06-30 21:29:46 -05:00

Makefile

ksmbd: negotiate and decode SMB2 compression

2026-06-16 18:57:22 -05:00

misc.c

ksmbd: treat unnamed DATA stream as base file

2026-06-22 20:15:04 -05:00

misc.h

ksmbd: fix path resolution in ksmbd_vfs_kern_path_create

2026-06-16 18:57:22 -05:00

ndr.c

…

ndr.h

…

ntlmssp.h

…

oplock.c

ksmbd: pin conn during async oplock break notification

2026-07-16 10:18:25 -05:00

oplock.h

ksmbd: avoid level II oplock break notification on unlink

2026-06-22 20:15:05 -05:00

proc.c

…

server.c

ksmbd: enforce signing required by the session

2026-07-22 09:54:03 -05:00

server.h

…

smb2misc.c

ksmbd: validate compound request size before reading StructureSize2

2026-07-16 10:18:25 -05:00

smb2ops.c

…

smb2pdu.c

ksmbd: use memcmp() to compare ClientGUIDs

2026-07-30 18:45:57 -05:00

smb2pdu.h

smb/client: refresh allocation after EOF-extending fallocate

2026-07-13 10:37:55 -05:00

smb_common.c

ksmbd: reject repeated SMB2 NEGOTIATE requests

2026-07-30 18:45:57 -05:00

smb_common.h

…

smbacl.c

ksmbd: validate ACE size against SID sub-authorities

2026-07-22 09:54:10 -05:00

smbacl.h

…

stats.h

…

transport_ipc.c

…

transport_ipc.h

…

transport_rdma.c

…

transport_rdma.h

…

transport_tcp.c

…

transport_tcp.h

…

unicode.c

…

unicode.h

…

vfs_cache.c

ksmbd: fix use-after-free in __close_file_table_ids()

2026-07-30 18:45:57 -05:00

vfs_cache.h

ksmbd: coalesce sub-15ms write time updates on close

2026-07-06 07:55:41 -05:00

vfs.c

ksmbd: preserve VFS inherited POSIX ACL mask

2026-07-22 09:54:01 -05:00

vfs.h

…

xattr.h

…