--- net/sctp/protocol.c

+++ net/sctp/protocol.c

@@ -1157,7 +1157,8 @@ SCTP_STATIC __init int sctp_init(void)

/* Set the pressure threshold to be a fraction of global memory that

* is up to 1/2 at 256 MB, decreasing toward zero with the amount of

- * memory, with a floor of 128 pages.

+ * memory, with a floor of 128 pages, and a ceiling that prevents an

+ * integer overflow.

* Note this initalizes the data in sctpv6_prot too

* Unabashedly stolen from tcp_init

*/

@@ -1165,6 +1166,7 @@ SCTP_STATIC __init int sctp_init(void)

limit = min(nr_pages, 1UL<<(28-PAGE_SHIFT)) >> (20-PAGE_SHIFT);

limit = (limit * (nr_pages >> (20-PAGE_SHIFT))) >> (PAGE_SHIFT-11);

limit = max(limit, 128UL);

+ limit = min(limit, INT_MAX * 4UL / 3 / 2);

sysctl_sctp_mem[0] = limit / 4 * 3;

sysctl_sctp_mem[1] = limit;

sysctl_sctp_mem[2] = sysctl_sctp_mem[0] * 2;