Re: net/sctp/socket.c:7036 sctp_getsockopt_peer_auth_chunks() warn: potential user controlled sizeof overflow '8 + num_chunks' '8 + 0-65531,4294967292-u32max'

From: Michael Bommarito

Date: Thu Aug 13 2026 - 16:22:01 EST


On Thu, Aug 13, 2026 at 3:05 PM Dan Carpenter <error27@xxxxxxxxx> wrote:
> It doesn't really cause a problem these days because copy_to_user()
> doesn't accept sizes more than INT_MAX but it would trigger a warning.

Thanks, good catch.

Claude noted that sctp_getsockopt_local_auth_chunks might also be
worth fixing. If no one objects, I'll address both sides in a set.

Thanks,
Mike