kernel/net/netfilter/xt_sctp.c
.. .. @@ -150,6 +150,8 @@ 150 150 { 151 151 const struct xt_sctp_info *info = par->matchinfo; 152 152 153 + if (info->flag_count > ARRAY_SIZE(info->flag_info))154 + return -EINVAL;153 155 if (info->flags & ~XT_SCTP_VALID_FLAGS) 154 156 return -EINVAL; 155 157 if (info->invflags & ~XT_SCTP_VALID_FLAGS)