smb: client: fix wrong index reference in smb2_compound_op()

JIRA: https://issues.redhat.com/browse/RHEL-124956

commit fbe2dc6
Author: Sang-Heon Jeon <ekffu200098@gmail.com>
Date:   Tue Sep 23 17:16:45 2025 +0900

    smb: client: fix wrong index reference in smb2_compound_op()
    
    In smb2_compound_op(), the loop that processes each command's response
    uses wrong indices when accessing response bufferes.
    
    This incorrect indexing leads to improper handling of command results.
    Also, if incorrectly computed index is greather than or equal to
    MAX_COMPOUND, it can cause out-of-bounds accesses.
    
    Fixes: 3681c74 ("smb: client: handle lack of EA support in smb2_query_path_info()") # 6.14
    Reviewed-by: Paulo Alcantara (Red Hat) <pc@manguebit.org>
    Signed-off-by: Sang-Heon Jeon <ekffu200098@gmail.com>
    Signed-off-by: Steve French <stfrench@microsoft.com>

Signed-off-by: Paulo Alcantara <paalcant@redhat.com>

Author: pcacjr

fs/smb/client/smb2inode.c

@@ -687,7 +687,7 @@ static int smb2_compound_op(const unsigned int xid, struct cifs_tcon *tcon,
 	}
 
 	for (i = 0; i < num_cmds; i++) {
-		char *buf = rsp_iov[i + i].iov_base;
+		char *buf = rsp_iov[i + 1].iov_base;
 
 		if (buf && resp_buftype[i + 1] != CIFS_NO_BUFFER)
 			rc = server->ops->map_error(buf, false);