ksmbd: check iov vector index in ksmbd_conn_write()

If ->iov_idx is zero, This means that the iov vector for the response was not added during the request process. In other words, it means that there is a problem in generating a response, So this patch return as an error to avoid NULL pointer dereferencing problem. Signed-off-by: Namjae Jeon <[email protected]>
cifsd-team · Sep 21, 2023 · 9b5d328 · 9b5d328
1 parent fc7fb83
commit 9b5d328
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/connection.c b/connection.c
@@ -248,6 +248,9 @@ int ksmbd_conn_write(struct ksmbd_work *work)
 		ksmbd_conn_unlock(conn);
 	}
 #else
+	if (!work->iov_idx)
+		return -EINVAL;
+
 	ksmbd_conn_lock(conn);
 	sent = conn->transport->ops->writev(conn->transport, work->iov,
 			work->iov_cnt,