Re: [PATCH] smb: client: fix overflow in passthrough ioctl bounds check
From: Markus Elfring
Date: Wed Jul 08 2026 - 10:48:32 EST
> smb2_ioctl_query_info() validates the PASSTHRU_FSCTL response payload
> before copying it to userspace.
…
> Use size_add() for the offset plus length check so overflow is treated as
> out of bounds.
>
> Fixes: 2b1116bbe898 ("CIFS: Use common error handling code in smb2_ioctl_query_info()")
Were implementation details improvable already before this commit?
Regards,
Markus