X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv6%2Fesp6.c;h=c6bb4c6d24b38352b4430e7892b59068714a9b3e;hb=3b23e665b68387f5ee7b21f7b75ceea4d9acae4a;hp=0ec1402320ea63898bd9761b6bb243cab14dad12;hpb=98c1fc934c097d84dc30c639e9bdb0b992ef53e2;p=linux-2.6

diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c
index 0ec1402320..c6bb4c6d24 100644
--- a/net/ipv6/esp6.c
+++ b/net/ipv6/esp6.c
@@ -282,7 +282,7 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb)
 	struct scatterlist *sg;
 	struct scatterlist *asg;
 
-	if (!pskb_may_pull(skb, sizeof(*esph))) {
+	if (!pskb_may_pull(skb, sizeof(*esph) + crypto_aead_ivsize(aead))) {
 		ret = -EINVAL;
 		goto out;
 	}