[linux-cifs-client] cifs: potential NULL dereference in parse_DFS_referrals()

Commit Message

Roel Kluin Aug. 31, 2009, 1:28 p.m. UTC

None

Patch

diff --git a/fs/cifs/cifssmb.c b/fs/cifs/cifssmb.c
index b195773..7ea3240 100644
--- a/fs/cifs/cifssmb.c
+++ b/fs/cifs/cifssmb.c
@@ -3963,6 +3963,10 @@  parse_DFS_referrals(TRANSACTION2_GET_DFS_REFER_RSP *pSMBr,
 						GFP_KERNEL);
 			cifsConvertToUCS((__le16 *) tmp, searchName,
 					PATH_MAX, nls_codepage, remap);
+			if (tmp == NULL) {
+				rc = -ENOMEM;
+				goto parse_DFS_referrals_exit;
+			}
 			node->path_consumed = cifs_ucs2_bytes(tmp,
 					le16_to_cpu(pSMBr->PathConsumed),
 					nls_codepage);