Re: net/sctp/socket.c:7036 sctp_getsockopt_peer_auth_chunks() warn: potential user controlled sizeof overflow '8 + num_chunks' '8 + 0-65531,4294967292-u32max'
From: Michael Bommarito
Date: Thu Aug 13 2026 - 16:22:01 EST
On Thu, Aug 13, 2026 at 3:05 PM Dan Carpenter <error27@xxxxxxxxx> wrote:
> It doesn't really cause a problem these days because copy_to_user()
> doesn't accept sizes more than INT_MAX but it would trigger a warning.
Thanks, good catch.
Claude noted that sctp_getsockopt_local_auth_chunks might also be
worth fixing. If no one objects, I'll address both sides in a set.
Thanks,
Mike