X-Git-Url: https://err.no/cgi-bin/gitweb.cgi?a=blobdiff_plain;f=net%2Fipv6%2Fesp6.c;h=c6bb4c6d24b38352b4430e7892b59068714a9b3e;hb=ca12a1a443a51298afcca627ad0bcbd8ad1dcddc;hp=0ec1402320ea63898bd9761b6bb243cab14dad12;hpb=cdd0972945dbcb8ea24db365d9b0e100af2a27bb;p=linux-2.6

diff --git a/net/ipv6/esp6.c b/net/ipv6/esp6.c
index 0ec1402320..c6bb4c6d24 100644
--- a/net/ipv6/esp6.c
+++ b/net/ipv6/esp6.c
@@ -282,7 +282,7 @@ static int esp6_input(struct xfrm_state *x, struct sk_buff *skb)
 	struct scatterlist *sg;
 	struct scatterlist *asg;
 
-	if (!pskb_may_pull(skb, sizeof(*esph))) {
+	if (!pskb_may_pull(skb, sizeof(*esph) + crypto_aead_ivsize(aead))) {
 		ret = -EINVAL;
 		goto out;
 	}