All of lore.kernel.org
 help / color / mirror / Atom feed
From: ChenXiaoSong <chenxiaosong@chenxiaosong.com>
To: Namjae Jeon <linkinjeon@kernel.org>
Cc: senozhatsky@chromium.org, tom@talpey.com,
	atteh.mailbox@gmail.com, chenxiaosong@kylinos.cn,
	Mobin Aydinfar <mobin@mobintestserver.ir>,
	linux-cifs@vger.kernel.org
Subject: Re: [PATCH 2/3] ksmbd: fix partial normalized name responses
Date: Mon, 14 Sep 2026 10:38:00 +0800	[thread overview]
Message-ID: <ebb45fdd-76f0-4d92-9899-13ecdaea555c@chenxiaosong.com> (raw)
In-Reply-To: <20260913113552.11486-1-linkinjeon@kernel.org>

Hi Namjae,

According to MS-FSA 2.1.5.12.30: 
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-fsa/3d5c68f8-fbc5-4f94-a51d-3600a319fd45

   Set AvailableNameLength to BlockAlignTruncate((OutputBufferSize - 
FieldOffset(FILE_NAME_INFORMATION.FileName)), 2).

It seems that the following changes are also needed:
```
smb2_get_info_file()
{
         unsigned int req_output_len = le32_to_cpu(req->OutputBufferLength);
...
         case FILE_NORMALIZED_NAME_INFORMATION:
                 fixed_len = FILE_NORMALIZED_NAME_INFORMATION_SIZE;
                 req_output_len = round_down(req_output_len, 2);
                 break;
...
         rc = buffer_check_err(req_output_len, fixed_len, rsp);
}
```

By the way, it seems that `struct smb2_file_alt_name_info` should be 
renamed to `struct smb2_file_name_info`, since both 
FILE_ALTERNATE_NAME_INFORMATION and FILE_NORMALIZED_NAME_INFORMATION use 
this structure. See:
- MS-FSA 2.1.5.12.4 FileAlternateNameInformation: 
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-fsa/5051d021-8d06-4b7e-94e3-55b118193427
- MS-FSA 2.1.5.12.30 FileNormalizedNameInformation: 
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-fsa/3d5c68f8-fbc5-4f94-a51d-3600a319fd45

On 9/13/26 19:35, Namjae Jeon wrote:
> Windows may request FILE_NORMALIZED_NAME_INFORMATION with an output
> buffer that only fits the fixed portion of the variable-length response.
> Treat the fixed portion as FILE_ALTERNATE_NAME_INFORMATION_SIZE so ksmbd
> returns STATUS_BUFFER_OVERFLOW instead of STATUS_INFO_LENGTH_MISMATCH.
> 
> This avoids rejecting valid partial normalized-name responses.
> 
> Fixes: 6b8b79226bc3 ("ksmbd: fix partial file information responses")
> Reported-by: Mobin Aydinfar <mobin@mobintestserver.ir>
> Signed-off-by: Namjae Jeon <linkinjeon@kernel.org>
> ---
>   fs/smb/server/smb2pdu.c | 3 +++
>   1 file changed, 3 insertions(+)
> 
> diff --git a/fs/smb/server/smb2pdu.c b/fs/smb/server/smb2pdu.c
> index f4d96799e1d2..38cddbf3e6ed 100644
> --- a/fs/smb/server/smb2pdu.c
> +++ b/fs/smb/server/smb2pdu.c
> @@ -7318,6 +7318,9 @@ static int smb2_get_info_file(struct ksmbd_work *work,
>   		case FILE_ALTERNATE_NAME_INFORMATION:
>   			fixed_len = FILE_ALTERNATE_NAME_INFORMATION_SIZE;
>   			break;
> +		case FILE_NORMALIZED_NAME_INFORMATION:
> +			fixed_len = FILE_ALTERNATE_NAME_INFORMATION_SIZE;
> +			break;
>   		case FILE_STREAM_INFORMATION:
>   			fixed_len = FILE_STREAM_INFORMATION_SIZE;
>   			break;

-- 
ChenXiaoSong <chenxiaosong@chenxiaosong.com>
Chinese Homepage: https://chenxiaosong.com
English Homepage: https://chenxiaosong.com/en


  parent reply	other threads:[~2026-09-14  2:38 UTC|newest]

Thread overview: 8+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2026-09-13 11:35 [PATCH 2/3] ksmbd: fix partial normalized name responses Namjae Jeon
2026-09-13 15:45 ` ChenXiaoSong
2026-09-14  1:18   ` Namjae Jeon
2026-09-14  2:38 ` ChenXiaoSong [this message]
2026-09-14  2:52   ` ChenXiaoSong
2026-09-14  3:38   ` Namjae Jeon
2026-09-14  4:26     ` ChenXiaoSong
2026-09-14 13:49       ` Namjae Jeon

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=ebb45fdd-76f0-4d92-9899-13ecdaea555c@chenxiaosong.com \
    --to=chenxiaosong@chenxiaosong.com \
    --cc=atteh.mailbox@gmail.com \
    --cc=chenxiaosong@kylinos.cn \
    --cc=linkinjeon@kernel.org \
    --cc=linux-cifs@vger.kernel.org \
    --cc=mobin@mobintestserver.ir \
    --cc=senozhatsky@chromium.org \
    --cc=tom@talpey.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.