Yu-Chun LinandGreg Kroah-Hartman 6df3939d93 sctp: Fix undefined behavior in left shift operation ...

[ Upstream commit 606572eb22 ]

According to the C11 standard (ISO/IEC 9899:2011, 6.5.7):
"If E1 has a signed type and E1 x 2^E2 is not representable in the result
type, the behavior is undefined."

Shifting 1 << 31 causes signed integer overflow, which leads to undefined
behavior.

Fix this by explicitly using '1U << 31' to ensure the shift operates on
an unsigned type, avoiding undefined behavior.

Signed-off-by: Yu-Chun Lin <eleanor15x@gmail.com>
Link: https://patch.msgid.link/20250218081217.3468369-1-eleanor15x@gmail.com
Signed-off-by: Jakub Kicinski <kuba@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2025-03-22 12:50:43 -07:00

..

associola.c

net/sctp: Prevent autoclose integer overflow in sctp_association_init()

2025-01-09 13:32:07 +01:00

auth.c

…

bind_addr.c

…

chunk.c

…

debug.c

…

diag.c

…

endpointola.c

…

input.c

sctp: Fix null-ptr-deref in reuseport_add_sock().

2024-08-14 13:58:39 +02:00

inqueue.c

net: sctp: fix skb leak in sctp_inq_free()

2024-08-19 06:04:27 +02:00

ipv6.c

ipv6: introduce dst_rt6_info() helper

2024-12-14 19:59:35 +01:00

Kconfig

…

Makefile

…

objcnt.c

…

offload.c

…

output.c

…

outqueue.c

…

primitive.c

…

proc.c

…

protocol.c

…

sm_make_chunk.c

…

sm_sideeffect.c

…

sm_statefuns.c

sctp: properly validate chunk size in sctp_sf_ootb()

2024-11-14 13:19:31 +01:00

sm_statetable.c

…

socket.c

sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start

2024-10-17 15:24:28 +02:00

stream_interleave.c

…

stream_sched_fc.c

…

stream_sched_prio.c

…

stream_sched_rr.c

…

stream_sched.c

…

stream.c

sctp: Fix undefined behavior in left shift operation

2025-03-22 12:50:43 -07:00

sysctl.c

sctp: sysctl: plpmtud_probe_interval: avoid using current->nsproxy

2025-01-17 13:36:18 +01:00

transport.c

…

tsnmap.c

…

ulpevent.c

…

ulpqueue.c

…