diff --git a/smb2pdu.c b/smb2pdu.c index 2b70e5a48..dd4c5c048 100644 --- a/smb2pdu.c +++ b/smb2pdu.c @@ -7422,6 +7422,8 @@ int smb2_write(struct ksmbd_work *work) } offset = le64_to_cpu(req->Offset); + if (offset < 0) + return -EINVAL; length = le32_to_cpu(req->Length); if (req->Channel == SMB2_CHANNEL_RDMA_V1 ||