| Message ID | 20240517132506.29679-1-phil@nwl.cc |
|---|---|
| State | New |
| Headers | show |
| Series | [iptables] extensions: libxt_sctp: Add an extra assert() | expand |
diff --git a/extensions/libxt_sctp.c b/extensions/libxt_sctp.c index 6e2b2745dcbd5..e8312f0c8abe9 100644 --- a/extensions/libxt_sctp.c +++ b/extensions/libxt_sctp.c @@ -7,6 +7,7 @@ * libipt_ecn.c borrowed heavily from libipt_dscp.c * */ +#include <assert.h> #include <stdbool.h> #include <stdio.h> #include <string.h> @@ -354,6 +355,7 @@ print_chunk_flags(uint32_t chunknum, uint8_t chunk_flags, uint8_t chunk_flags_ma for (i = 7; i >= 0; i--) { if (chunk_flags_mask & (1 << i)) { + assert(chunknum < ARRAY_SIZE(sctp_chunk_names)); if (chunk_flags & (1 << i)) { printf("%c", sctp_chunk_names[chunknum].valid_flags[7-i]); } else {
The code is sane, but this keeps popping up in static code analyzers. Signed-off-by: Phil Sutter <phil@nwl.cc> --- extensions/libxt_sctp.c | 2 ++ 1 file changed, 2 insertions(+)