From c3f10e27fe99af18ab4c374b3c046803580f98be Mon Sep 17 00:00:00 2001 From: Bart Trojanowski Date: Thu, 6 Jul 2006 16:21:24 -0400 Subject: [PATCH] Fixed minimum skb lenght requried for ipsec decompression. By the time the skb gets to ipsec_rcv_ipcomp_checks(), the skb->data points to the ipheader, so it's incorrect to check for irs->hard_header_len. --- net/ipsec/ipsec_ipcomp.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) diff --git a/net/ipsec/ipsec_ipcomp.c b/net/ipsec/ipsec_ipcomp.c index 4eb9500..0a40e68 100644 --- a/net/ipsec/ipsec_ipcomp.c +++ b/net/ipsec/ipsec_ipcomp.c @@ -77,7 +77,7 @@ ipsec_rcv_ipcomp_checks(struct ipsec_rcv { int ipcompminlen; - ipcompminlen = irs->hard_header_len + sizeof(struct iphdr); + ipcompminlen = sizeof(struct iphdr); if(skb->len < (ipcompminlen + sizeof(struct ipcomphdr))) { KLIPS_PRINT(debug_rcv & DB_RX_INAU, -- 1.4.0