Unverified Commit 4f763890 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!13852 sctp: properly validate chunk size in sctp_sf_ootb() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liu Jian <liujian56@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/ESBDMABPT2I4NZISBA2BOTF32HHKMWL4/ 
 
https://gitee.com/src-openeuler/kernel/issues/IB5ARH 
 
Link:https://gitee.com/openeuler/kernel/pulls/13852

 

Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Reviewed-by: default avatarYuan Can <yuancan@huawei.com>
Signed-off-by: default avatarYuan Can <yuancan@huawei.com>
parents 051a322d c8f197d9

net/sctp/sm_statefuns.c

+1 −1
Original line number Diff line number Diff line
@@ -3652,7 +3652,7 @@ enum sctp_disposition sctp_sf_ootb(struct net *net, 
		}



		ch = (struct sctp_chunkhdr *)ch_end;

	} while (ch_end < skb_tail_pointer(skb));

	} while (ch_end + sizeof(*ch) < skb_tail_pointer(skb));



	if (ootb_shut_ack)

		return sctp_sf_shut_8_4_5(net, ep, asoc, type, arg, commands);