Re: [PATCH RESEND] cifs: bound invalid NTLMSSP signature diagnostic

[Paulo Alcantara]

Yifan Zhang <yfzhang23@xxxxxxxxxxxxxx> writes:

> The NTLMSSP Signature field is an eight-byte binary value and need not be
> NUL-terminated. decode_ntlmssp_challenge() prints it with %s on the
> signature-mismatch path, so the diagnostic can continue beyond the received
> blob until it encounters a zero byte.
>
> KASAN reports:
>
>   BUG: KASAN: slab-out-of-bounds in string
>   Read of size 1
>   string
>   vsnprintf
>   _printk
>   decode_ntlmssp_challenge
>
> Print the fixed-width field with the bounded hexadecimal format.
> ...

Applied.