Unverified Commit 6285e577 authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!13853 sctp: properly validate chunk size in sctp_sf_ootb() 

Merge Pull Request from: @ci-robot 
 
PR sync from: Liu Jian <liujian56@huawei.com>
https://mailweb.openeuler.org/hyperkitty/list/kernel@openeuler.org/message/XPJZBTGRBRGRFNY4BFA7IYLV3COA2T7U/ 
 
https://gitee.com/src-openeuler/kernel/issues/IB5ARH 
 
Link:https://gitee.com/openeuler/kernel/pulls/13853

 

Reviewed-by: default avatarZhang Changzhong <zhangchangzhong@huawei.com>
Reviewed-by: default avatarLi Nan <linan122@huawei.com>
Signed-off-by: default avatarLi Nan <linan122@huawei.com>
parents 87fa1e0e c4bb4158

net/sctp/sm_statefuns.c

+1 −1
Original line number Diff line number Diff line
@@ -3637,7 +3637,7 @@ enum sctp_disposition sctp_sf_ootb(struct net *net, 
		}



		ch = (struct sctp_chunkhdr *)ch_end;

	} while (ch_end < skb_tail_pointer(skb));

	} while (ch_end + sizeof(*ch) < skb_tail_pointer(skb));



	if (ootb_shut_ack)

		return sctp_sf_shut_8_4_5(net, ep, asoc, type, arg, commands);