hc
2024-01-03 2f7c68cb55ecb7331f2381deb497c27155f32faf
kernel/net/netfilter/xt_sctp.c
....@@ -150,6 +150,8 @@
150150 {
151151 const struct xt_sctp_info *info = par->matchinfo;
152152
153
+ if (info->flag_count > ARRAY_SIZE(info->flag_info))
154
+ return -EINVAL;
153155 if (info->flags & ~XT_SCTP_VALID_FLAGS)
154156 return -EINVAL;
155157 if (info->invflags & ~XT_SCTP_VALID_FLAGS)