Colin Ian King
0e73fc9a56
net: sctp: fix array overrun read on sctp_timer_tbl ...
The comparison on the timeout can lead to an array overrun
read on sctp_timer_tbl because of an off-by-one error. Fix
this by using < instead of <= and also compare to the array
size rather than SCTP_EVENT_TIMEOUT_MAX.
Fixes CoverityScan CID#1397639 ("Out-of-bounds read")
Signed-off-by: Colin Ian King <colin.king@canonical.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2017-01-20 11:26:01 -05:00
2016-12-24 11:46:01 -08:00
2016-12-24 11:46:01 -08:00
2016-12-28 15:11:32 -05:00
2017-01-16 14:39:58 -05:00
2016-12-16 10:24:44 -08:00
2017-01-05 11:49:57 -05:00
2016-12-25 17:21:22 +01:00
2016-12-14 22:39:08 +01:00
2017-01-18 17:07:14 -05:00
2016-12-24 11:46:01 -08:00
2017-01-10 20:18:52 -05:00
2016-12-16 00:13:43 +02:00
2017-01-19 11:35:26 -05:00
2017-01-20 11:07:48 -05:00
2016-12-25 17:21:22 +01:00
2016-12-24 11:46:01 -08:00
2017-01-10 21:08:29 -05:00
2017-01-01 22:07:20 -05:00
2016-12-24 11:46:01 -08:00
2017-01-13 14:47:21 +01:00
2016-12-25 17:21:22 +01:00
2017-01-05 11:49:57 -05:00
2017-01-06 22:20:45 -05:00
2016-12-24 11:46:01 -08:00
2017-01-15 22:15:16 -05:00
2017-01-20 11:01:17 -05:00
2017-01-10 20:45:04 -05:00
2016-12-20 14:22:49 -05:00
2016-12-24 11:46:01 -08:00
2016-12-14 16:04:10 -08:00
2017-01-16 19:43:19 -05:00
2017-01-20 11:26:01 -05:00
2017-01-12 16:14:47 -05:00
2017-01-16 13:31:53 -05:00
2016-12-24 11:46:01 -08:00
2016-12-17 20:17:04 -08:00
2017-01-11 16:34:25 +01:00
2016-12-24 11:46:01 -08:00
2016-12-25 17:21:22 +01:00
2016-12-24 11:46:01 -08:00
2017-01-11 09:47:10 -05:00
2017-01-10 11:29:50 -05:00
0e73fc9a56