Jeff Layton <jlayton@xxxxxxxxxx> wrote: > It's possible that when we go to decode the string area in the > SESSION_SETUP response, that bytes_remaining will be 0. Decrementing it at > that point will mean that it can go "negative" and wrap. Check for a > bytes_remaining value of 0, and don't try to decode the string area if > that's the case. > > Cc: stable@xxxxxxxxxx > Reported-by: David Howells <dhowells@xxxxxxxxxx> > Signed-off-by: Jeff Layton <jlayton@xxxxxxxxxx> Acked-by: David Howells <dhowells@xxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe linux-cifs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
