From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-qt1-f176.google.com (mail-qt1-f176.google.com [209.85.160.176]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id B9940472534 for ; Tue, 28 Jul 2026 21:28:03 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.160.176 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785274085; cv=none; b=pk6I4t6aF6TgOoiKW7tzF8yO20VYK7X7Iaf19+y0KrzpPmRIaGm1QWqcBzlCD976dbnlYQJ5qyub7GfwE04JqIifyMeODK7pKd4z5PB/SS8tbPdLtCvN86n2UsrF0HyDcStOqIdJRpQHw2CD77vp/cAV8R5U4uKh7F/5dcFQ8Q0= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1785274085; c=relaxed/simple; bh=EttXnhReWDaZNc/PGIGptRBiAnqcvzfN6Dm1pRr5f+I=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=uP7j5Z8pEHs8l+k4sAyQzt0Le5AiYyZjVvRnAxRhtp4bdXeuIcPkhCHx/3tVcZ0MGnrilgHG2r40y6gxvPOJeUEKvoOpKCTXgJ2TVwUAtdtPML9WfUIH8fxTvX73XO7/4cKmCOLahbl6bAt2Ne4+sqLiJ9e1TzKc+9zNwNfhm+Q= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=b7Jw+A7Z; arc=none smtp.client-ip=209.85.160.176 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="b7Jw+A7Z" Received: by mail-qt1-f176.google.com with SMTP id d75a77b69052e-51c0cea8883so2517851cf.1 for ; Tue, 28 Jul 2026 14:28:03 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785274082; x=1785878882; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to:content-type; bh=LRM7mfkSEq/GHrJM51V71J9c4QJVY0Jbu0azwhJmg/s=; b=b7Jw+A7Zn+qTnjj9xaBUfkKy+hosFg7I2tVTE9Vfr/Qov/MR2F+BtXZtX/1VPdo5V3 DE2tBnVy/TCvGBiesoK7j+J+yTHpcSMf/eAXg0wshcAH5v6a1AoUWlAChZHV/Uqa5lW/ LeppjwT8oKq/7Bnsk6Cg4NRZ9my53GwTKmk/ioADpsNEvCKq5OCpkwHcUJbrpprBkNdh nApIK+sFPiRXcTRNaRENEngDj/2QqWaxLYIt2K01O4Hec05gTlwO1dJf3QxY09yFxyAA MvjFH9Wr+Z0sZZN+QNLBW9LTY426J+LLKSt7Lckpaxvmhdp114qwHrb7Y7UtnbtX0mBq FGjA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785274082; x=1785878882; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to:content-type; bh=LRM7mfkSEq/GHrJM51V71J9c4QJVY0Jbu0azwhJmg/s=; b=l+Unv2I+ewnHj2hCwdhvIc/yLyFq++Dwm//yW9YYvjvQdSZIVSHZW5Mi0/bI+pJHIi JsylQ4/0jCYeDx4sJgXsYK7czl8/OuqjDMfckU9b9X7So37Ta6RF2UCNcLtf68886TVo 7WFwI2Gs3b0SMWKlosNzT3lKsg7HBEacfh1SJKITPRMGTrg/tDNUnmgf6zKDUwuFl1x5 3KwGm/veRoHsgSGwjaupgg/HK5lVSNx3+PhIfOt1hgOLiu2vOKcNbXDtdpnrlBtqy3xr ZVi8r6oSVzsn5RGISmDbKeLmzB21t1+i12ghgsar/9eOUsFrjwOI3BxJaE7L6k+vRiSD TM4A== X-Forwarded-Encrypted: i=1; AHgh+RpWlLF/5nuharN804ND0NqotWl1QOHmg34IE8cF/SUfTBPWUVbU5lg71rbdINXz93K+fbcSr8GFMvME2WQ=@vger.kernel.org X-Gm-Message-State: AOJu0Yxh0NE6e+2ZOc90xK7On0lLIMxwDgaMOzk6u3Nw+2mz3k15Zg2C mTP3mIB9On0sqoEo/WTJBq46W0PTeRzlw6ShkYVH5jf/lmEBZ7GJj7C7CIFKuA== X-Gm-Gg: AR+sD11qYEyjHpDX8F0vSae5dE/d06j5YwBXVbGrKD5jUoYcy0c013ssLxFwcdwfakJ p/57tpW5f9tfWMjAaPyoMBvi+KCfPs6NIMD/7CRoSSekz7LYxNDOiiVb7JThBukV/4wZCc0Y6OF JQsWUPvoFD8R9JMi6agyZihjPwoPFYkl4j5wDZEIsVZLtWjlVTOVXkmmkiJPEqyxx2HQdsGOoD4 XYgkwSx4MGIkbM290M5GspDRKDY2B2Iq21zWaIBELr2SXBd74Nx55tn0ILVrqFcUTkDRlGE33c6 f3tl55hlAlKh3ExlnsWye9yMse6U5FId+PY0xnXCkmyPbcP5qX401EXSXs1c14OZFLKB8GnZCg+ PFiUDquiQc1/j+wQlKGJvpy3vhXamqzMm5d0yl72Df2ZC3J3ALmESEV9e7UYJLEsv+YFIoXVaKi emo3ZTSoIAFdsAeJ2ATqCYOwuvDgfWDFna8vIf36IXN8k0S7k1XQKrAyUmazV2ho4nDE79MvbZn BKItKMFgilSq8DoGMHnf7unsadPZLVguLKzY7pohuEmBXXIb2vTUsMfwH6E0Gl4NAaTh4QkAP0t 1341E4sI0AD2VqrdsAwK4bTpw2UKocsK9VlQojA= X-Received: by 2002:a05:622a:313:b0:51c:7aa7:e0eb with SMTP id d75a77b69052e-529d716a395mr37469861cf.40.1785274082510; Tue, 28 Jul 2026 14:28:02 -0700 (PDT) Received: from ryzen.lan ([2601:644:8000:7a86::e35]) by smtp.gmail.com with ESMTPSA id d75a77b69052e-529e2b4f241sm6777091cf.7.2026.07.28.14.28.00 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 28 Jul 2026 14:28:01 -0700 (PDT) From: Rosen Penev To: linux-cifs@vger.kernel.org Cc: Namjae Jeon , Steve French , Sergey Senozhatsky , Tom Talpey , linux-kernel@vger.kernel.org (open list) Subject: [PATCHv2] ksmbd: remove extra byte from ipc_msg_alloc() size calculations Date: Tue, 28 Jul 2026 14:27:59 -0700 Message-ID: <20260728212759.54722-1-rosenp@gmail.com> X-Mailer: git-send-email 2.55.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Three ipc_msg_alloc() calls in transport_ipc.c allocate sizeof(struct) + payload_len + 1, but the extra byte is unnecessary. The payload data is binary and copied with memcpy() to the exact size; no null terminator is needed. This was present in the original commit that introduced the file, where the structs already used [0] zero-length arrays, so the +1 was never correct. Assisted-by: Opencode:Big-Pickle Signed-off-by: Rosen Penev Reviewed-by: ChenXiaoSong --- v2: remove Fixes: fs/smb/server/transport_ipc.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/fs/smb/server/transport_ipc.c b/fs/smb/server/transport_ipc.c index 0c581b9624d3..41611c013d81 100644 --- a/fs/smb/server/transport_ipc.c +++ b/fs/smb/server/transport_ipc.c @@ -658,7 +658,7 @@ ksmbd_ipc_spnego_authen_request(const char *spnego_blob, int blob_len) return NULL; msg = ipc_msg_alloc(sizeof(struct ksmbd_spnego_authen_request) + - blob_len + 1); + blob_len); if (!msg) return NULL; @@ -839,7 +839,7 @@ struct ksmbd_rpc_command *ksmbd_rpc_write(struct ksmbd_session *sess, int handle if (payload_sz > KSMBD_IPC_MAX_PAYLOAD) return NULL; - msg = ipc_msg_alloc(sizeof(struct ksmbd_rpc_command) + payload_sz + 1); + msg = ipc_msg_alloc(sizeof(struct ksmbd_rpc_command) + payload_sz); if (!msg) return NULL; @@ -898,7 +898,7 @@ struct ksmbd_rpc_command *ksmbd_rpc_ioctl(struct ksmbd_session *sess, int handle if (payload_sz > KSMBD_IPC_MAX_PAYLOAD) return NULL; - msg = ipc_msg_alloc(sizeof(struct ksmbd_rpc_command) + payload_sz + 1); + msg = ipc_msg_alloc(sizeof(struct ksmbd_rpc_command) + payload_sz); if (!msg) return NULL; -- 2.55.0