lending: add extra owner check

Author: jordaaash

token-lending/program/src/processor.rs

@@ -1567,6 +1567,10 @@ fn process_flash_loan(
     }
 
     let mut reserve = Reserve::unpack(&reserve_info.data.borrow())?;
+    if reserve_info.owner != program_id {
+        msg!("Reserve provided is not owned by the lending program");
+        return Err(LendingError::InvalidAccountOwner.into());
+    }
     if &reserve.lending_market != lending_market_info.key {
         msg!("Invalid reserve lending market account");
         return Err(LendingError::InvalidAccountInput.into());