X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv6%2Fesp6.c;h=c6bb4c6d24b38352b4430e7892b59068714a9b3e;hb=3b23e665b68387f5ee7b21f7b75ceea4d9acae4a;hp=0ec1402320ea63898bd9761b6bb243cab14dad12;hpb=0a3abcf75bf391fec4e32356ab5ddb8f5d2e6b41;p=linux-2.6

diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c
index 0ec1402320..c6bb4c6d24 100644
--- a/net/ipv6/esp6.c
+++ b/net/ipv6/esp6.c
@@ -282,7 +282,7 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb)
 	struct scatterlist *sg;
 	struct scatterlist *asg;
 
-	if (!pskb_may_pull(skb, sizeof(*esph))) {
+	if (!pskb_may_pull(skb, sizeof(*esph) + crypto_aead_ivsize(aead))) {
 		ret = -EINVAL;
 		goto out;
 	}