[lvc-project] [PATCH net v4] sctp: fix a potential OOB access in sctp_sched_set_sched()

[Marcelo Ricardo Leitner]

On Wed, May 03, 2023 at 01:37:59PM +0000, Gavrilov Ilia wrote:
> The 'sched' index value must be checked before accessing an element
> of the 'sctp_sched_ops' array. Otherwise, it can lead to OOB access.
> 
> Note that it's harmless since the 'sched' parameter is checked before
> calling 'sctp_sched_set_sched'.
> 
> Found by InfoTeCS on behalf of Linux Verification Center
> (linuxtesting.org) with SVACE.
> 
> Reviewed-by: Xin Long <lucien.xin at gmail.com>
> Reviewed-by: Simon Horman <simon.horman at corigine.com>
> Signed-off-by: Ilia.Gavrilov <Ilia.Gavrilov at infotecs.ru>

Acked-by: Marcelo Ricardo Leitner <marcelo.leitner at gmail.com>

Thx!