Re: net/sctp/socket.c:7036 sctp_getsockopt_peer_auth_chunks() warn: potential user controlled sizeof overflow '8 + num_chunks' '8 + 0-65531,4294967292-u32max'

Michael Bommarito <[email protected]> Thu, 13 Aug 2026 16:21:15 -0400

Newsgroups	dev.linux.lists.oe-kbuild,dev.linux.lists.oe-kbuild-all,org.kernel.vger.linux-kernel
Message-ID	<CAJJ9bXy7KXcumxRVg0MzcYMt5Dw2txzzUKJryDE08cLfBfnr6A@mail.gmail.com>

On Thu, Aug 13, 2026 at 3:05 PM Dan Carpenter <[email protected]> wrote:
> It doesn't really cause a problem these days because copy_to_user()
> doesn't accept sizes more than INT_MAX but it would trigger a warning.

Thanks, good catch.

Claude noted that sctp_getsockopt_local_auth_chunks might also be
worth fixing.  If no one objects, I'll address both sides in a set.

Thanks,
Mike