[SCTP] Fix accessing Gap Ack blocks array with a -ve index in

sctp_outq_sack()

[SCTP] Fix accessing Gap Ack blocks array with a -ve index in
sctp_outq_sack()
40d40337 · Sridhar Samudrala · Sridhar Samudrala · 71033988 · 40d40337
Commit 40d40337 authored May 04, 2004 by Sridhar Samudrala Committed by Sridhar Samudrala May 04, 2004
Hide whitespace changes
Inline Side-by-side

Showing with 4 additions and 2 deletions

net/sctp/outqueue.c net/sctp/outqueue.c +4 -2

No files found.
--- a/net/sctp/outqueue.c
+++ b/net/sctp/outqueue.c
@@ -1056,8 +1056,10 @@ int sctp_outq_sack(struct sctp_outq *q, struct sctp_sackhdr *sack)
 	}
 	/* Get the highest TSN in the sack. */
-	highest_tsn = sack_ctsn +
+	highest_tsn = sack_ctsn;
-		ntohs(frags[ntohs(sack->num_gap_ack_blocks) - 1].gab.end);
+	if (sack->num_gap_ack_blocks)
+		highest_tsn +=
+		    ntohs(frags[ntohs(sack->num_gap_ack_blocks) - 1].gab.end);
 	if (TSN_lt(asoc->highest_sacked, highest_tsn)) {
 		highest_new_tsn = highest_tsn;