[PATCH 15/16] udp: Out-of-bounds read, CWE-125 in udp_timer()