X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv4%2Fesp4.c;h=4e73e5708e700d276ddb3be80a9452931621a15b;hb=1730554f253deb65fe5112c54b2f898d5318a328;hp=f3ceca31aa45c15e361f3d8557d4a5c13f726905;hpb=76fef2b6bffa13ad7ccd54c0493b053295721b9a;p=linux-2.6

diff --git a/net/ipv4/esp4.c b/net/ipv4/esp4.c
index f3ceca31aa..4e73e5708e 100644
--- a/net/ipv4/esp4.c
+++ b/net/ipv4/esp4.c
@@ -336,7 +336,7 @@ static int esp_input(struct xfrm_state *x, struct sk_buff *skb)
 	struct scatterlist *asg;
 	int err = -EINVAL;
 
-	if (!pskb_may_pull(skb, sizeof(*esph)))
+	if (!pskb_may_pull(skb, sizeof(*esph) + crypto_aead_ivsize(aead)))
 		goto out;
 
 	if (elen <= 0)