X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv4%2Fesp4.c;h=4e73e5708e700d276ddb3be80a9452931621a15b;hb=ed88098e25d77bef3b2ad8c9d8e2ebf454d9ccbf;hp=f3ceca31aa45c15e361f3d8557d4a5c13f726905;hpb=54f53f2b94feb72622bec7a8563fc487d9f97720;p=linux-2.6

diff --git a/net/ipv4/esp4.c b/net/ipv4/esp4.c
index f3ceca31aa..4e73e5708e 100644
--- a/net/ipv4/esp4.c
+++ b/net/ipv4/esp4.c
@@ -336,7 +336,7 @@ static int esp_input(struct xfrm_state *x, struct sk_buff *skb)
 	struct scatterlist *asg;
 	int err = -EINVAL;
 
-	if (!pskb_may_pull(skb, sizeof(*esph)))
+	if (!pskb_may_pull(skb, sizeof(*esph) + crypto_aead_ivsize(aead)))
 		goto out;
 
 	if (elen <= 0)