1 files changed, 5 insertions, 1 deletions

diff --git a/include/net/sctp/ulpevent.h b/include/net/sctp/ulpevent.h
index 1060494ac230..b8c86ec1a8f5 100644
--- a/include/net/sctp/ulpevent.h
+++ b/include/net/sctp/ulpevent.h
@@ -153,8 +153,12 @@ __u16 sctp_ulpevent_get_notification_type(const struct sctp_ulpevent *event);
 static inline int sctp_ulpevent_type_enabled(__u16 sn_type,
                                              struct sctp_event_subscribe *mask)
 {
+        int offset = sn_type - SCTP_SN_TYPE_BASE;
         char *amask = (char *) mask;
-        return amask[sn_type - SCTP_SN_TYPE_BASE];
+
+        if (offset >= sizeof(struct sctp_event_subscribe))
+                return 0;
+        return amask[offset];
 }
 
 /* Given an event subscription, is this event enabled? */