netfilter: conntrack: fix bug in for_each_sctp_chunk
authorSriram Yagnaraman <sriram.yagnaraman@est.tech>
Tue, 24 Jan 2023 01:47:19 +0000 (02:47 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 24 Jan 2023 08:52:31 +0000 (09:52 +0100)
commit98ee0077452527f971567db01386de3c3d97ce13
tree91074667060b4febeede75b74d4691da5b5d45c2
parenta9993591fa94246b16b444eea55d84c54608282a
netfilter: conntrack: fix bug in for_each_sctp_chunk

skb_header_pointer() will return NULL if offset + sizeof(_sch) exceeds
skb->len, so this offset < skb->len test is redundant.

if sch->length == 0, this will end up in an infinite loop, add a check
for sch->length > 0

Fixes: 9fb9cbb1082d ("[NETFILTER]: Add nf_conntrack subsystem.")
Suggested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sriram Yagnaraman <sriram.yagnaraman@est.tech>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_proto_sctp.c