xnu-6153.121.1.tar.gz

[apple/xnu.git] / bsd / netinet / mptcp_subr.c

diff --git a/bsd/netinet/mptcp_subr.c b/bsd/netinet/mptcp_subr.c
index 9e8637a928dffa7e5f7a0255ec6639d40457db4d..356298cf7b78949f336209b2a146c268c717d69c 100644 (file)
--- a/bsd/netinet/mptcp_subr.c
+++ b/bsd/netinet/mptcp_subr.c
@@ -2394,6 +2394,11 @@ mptcp_subflow_add(struct mptses *mpte, struct sockaddr *src,
                goto out_err;
        }
 
+       if (mpte->mpte_numflows > MPTCP_MAX_NUM_SUBFLOWS) {
+               error = EOVERFLOW;
+               goto out_err;
+       }
+
        mpts = mptcp_subflow_alloc();
        if (mpts == NULL) {
                os_log_error(mptcp_log_handle, "%s - %lx: malloc subflow failed\n",