Re: [PATCH net v4] sctp: fix a potential OOB access in sctp_sched_set_sched()

On Wed, May 03, 2023 at 01:37:59PM +0000, Gavrilov Ilia wrote:

The 'sched' index value must be checked before accessing an element
of the 'sctp_sched_ops' array. Otherwise, it can lead to OOB access.

Note that it's harmless since the 'sched' parameter is checked before
calling 'sctp_sched_set_sched'.

Found by InfoTeCS on behalf of Linux Verification Center
(linuxtesting.org) with SVACE.

Reviewed-by: Xin Long <lucien.xin@gmail.com>
Reviewed-by: Simon Horman <redacted>
Signed-off-by: Ilia.Gavrilov <redacted>

Acked-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>

Thx!