From nobody Sat Apr 09 00:57:07 2022 X-Original-To: bugs@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 86B7C1A8332C for ; Sat, 9 Apr 2022 00:57:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4KZxXg2SVnz4db3 for ; Sat, 9 Apr 2022 00:57:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org (kenobi.freebsd.org [IPv6:2610:1c1:1:606c::50:1d]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 320A3795F for ; Sat, 9 Apr 2022 00:57:07 +0000 (UTC) (envelope-from bugzilla-noreply@freebsd.org) Received: from kenobi.freebsd.org ([127.0.1.5]) by kenobi.freebsd.org (8.15.2/8.15.2) with ESMTP id 2390v76K000604 for ; Sat, 9 Apr 2022 00:57:07 GMT (envelope-from bugzilla-noreply@freebsd.org) Received: (from bugzilla@localhost) by kenobi.freebsd.org (8.15.2/8.15.2/Submit) id 2390v7aC000603 for bugs@FreeBSD.org; Sat, 9 Apr 2022 00:57:07 GMT (envelope-from bugzilla-noreply@freebsd.org) X-Authentication-Warning: kenobi.freebsd.org: bugzilla set sender to bugzilla-noreply@freebsd.org using -f From: bugzilla-noreply@freebsd.org To: bugs@FreeBSD.org Subject: [Bug 263043] malformed SMB reply can page-fault the kernel in smb_t2_placedata() Date: Sat, 09 Apr 2022 00:57:07 +0000 X-Bugzilla-Reason: AssignedTo X-Bugzilla-Type: changed X-Bugzilla-Watch-Reason: None X-Bugzilla-Product: Base System X-Bugzilla-Component: kern X-Bugzilla-Version: Unspecified X-Bugzilla-Keywords: X-Bugzilla-Severity: Affects Some People X-Bugzilla-Who: commit-hook@FreeBSD.org X-Bugzilla-Status: New X-Bugzilla-Resolution: X-Bugzilla-Priority: --- X-Bugzilla-Assigned-To: bugs@FreeBSD.org X-Bugzilla-Flags: X-Bugzilla-Changed-Fields: Message-ID: In-Reply-To: References: Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Bugzilla-URL: https://bugs.freebsd.org/bugzilla/ Auto-Submitted: auto-generated List-Id: Bug reports List-Archive: https://lists.freebsd.org/archives/freebsd-bugs List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-freebsd-bugs@freebsd.org MIME-Version: 1.0 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1649465827; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references; bh=sJnEGXssJu55T310al82TSJLTa66HtUfj3fFXkTfK8o=; b=BeaaWDqx0FK8lLfqcLosmZQN4AzoHovpPXsAgCtfInZvH2BNoy4keCwaaaQNTckSa/HNPh JYSmRMSwTl6v4J8ogZkyEjUvoo8fzOThREOupZ0vWBIoit0WCy07v/aaBIDqlJ1Nhd3b7w +P7AkaGJUPG1q3RIWoOW2ttS/WC7vpcFUObAlUTS3jALg3Ve0r2362vC9C2Y4vOmj+mabx 966SYwVfuaFIbvhNv16/90WGbjhfpeIfvAsWFKM5ehs52WYohJfMSJ+VbimMf5yJVGh6Sw PA24vqR250CUZWJy1BBCcs+iCf9NhXAyQV3pjPPYSmobhN84ZA4glk0G1x1atw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1649465827; a=rsa-sha256; cv=none; b=yT6bYSz5W4TueX8JrDt+2VW7w+KnqdTTiMx/bLSTU90RpyCJFRlXSempqZT0KYztoa2I19 8AI3Q7iBnHxScvu3sYk+wyS9z2bL8LJGp/HSSBByBvU0ReWtJY94Fcla+/TI2J/PM0zYNb XLBZIxyU+8dyGGuzl0l85HIHYcqM54DWZk/FgMYi7G9A26yT+N59gDwZAEYvYC1aeYemD6 d0gyut//6Q+6dmLWNex9J9YlwyPPbKdKv2GXKvL5u9/amnuJmEmM7Ty4GyTrX+8inIQQtE d3orqzZVJYSA4rnCm+TTTSJvMy/XNtVd4q9G6biGatfko7ncuj+iZGlsEG2N5w== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D263043 --- Comment #3 from commit-hook@FreeBSD.org --- A commit in branch stable/12 references this bug: URL: https://cgit.FreeBSD.org/src/commit/?id=3Dc054fcae14d1883d7a6edce16b24cd328= edd0079 commit c054fcae14d1883d7a6edce16b24cd328edd0079 Author: Ed Maste AuthorDate: 2022-04-06 18:25:37 +0000 Commit: Ed Maste CommitDate: 2022-04-09 00:56:01 +0000 smbfs: caution against use in the manpage It supports only the obsolete SMBv1 protocol, is known to be buggy, and likely has security vulnerabilities. It will either be updated or removed in the future, but for now at least describe the current state in the man page. PR: 263043 MFC after: 3 days Sponsored by: The FreeBSD Foundation (cherry picked from commit 7c140ef034c33ab0b16b535f3d5f945dc8f71cb4) share/man/man5/smbfs.5 | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) --=20 You are receiving this mail because: You are the assignee for the bug.=