Comment # 2 on bug 1195360 from Jiri Slaby

> size_of_ntlmssp_blob+0x6a/0x90 [cifs 7ef9028630b6a8ae2a075c5cad1bded3495fffbf]

It's obviously the last strnlen in there:
        sz += sizeof(__le16) * strnlen(ses->workstation_name,
CIFS_MAX_WORKSTATION_LEN);

The others are protected:
if (ses->domainName)
...
if (ses->user_name)

Not sure why this one is not. Paulo?