Commit 18f39e7b authored Aug 17, 2014 by Steve French

[CIFS] Possible null ptr deref in SMB2_tcon



As Raphael Geissert pointed out, tcon_error_exit can dereference tcon
and there is one path in which tcon can be null.

Signed-off-by: Steve French <smfrench@gmail.com>
CC: Stable <stable@vger.kernel.org> # v3.7+
Reported-by: Raphael Geissert <geissert@debian.org>

parent 754789a1

fs/cifs/smb2pdu.c

+2 −1

Original line number	Diff line number	Diff line
		@@ -907,6 +907,7 @@ SMB2_tcon(const unsigned int xid, struct cifs_ses ses, const char tree,
		tcon_error_exit:
		if (rsp->hdr.Status == STATUS_BAD_NETWORK_NAME) {
		cifs_dbg(VFS, "BAD_NETWORK_NAME: %s\n", tree);
		if (tcon)
		tcon->bad_network_name = true;
		}
		goto tcon_exit;