diff options
| author | Ermal Luçi <eri@FreeBSD.org> | 2010-04-02 18:15:23 +0000 |
|---|---|---|
| committer | Ermal Luçi <eri@FreeBSD.org> | 2010-04-02 18:15:23 +0000 |
| commit | 87a25418ac42fd29c868e7752ce5930feefbec5d (patch) | |
| tree | d8cc19886aa77c1380beb0ea901b1330d246a2a2 /sys/netipsec/ipsec.c | |
| parent | 489ca05be7f4f45533139b624aec86e6e1a2ffe7 (diff) | |
| download | src-87a25418ac42fd29c868e7752ce5930feefbec5d.tar.gz src-87a25418ac42fd29c868e7752ce5930feefbec5d.zip | |
Notes
Diffstat (limited to 'sys/netipsec/ipsec.c')
| -rw-r--r-- | sys/netipsec/ipsec.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/netipsec/ipsec.c b/sys/netipsec/ipsec.c index 4b552c8139c6..5ee4bbb8f400 100644 --- a/sys/netipsec/ipsec.c +++ b/sys/netipsec/ipsec.c @@ -592,7 +592,7 @@ ipsec4_get_ulp(struct mbuf *m, struct secpolicyindex *spidx, int needport) IPSEC_ASSERT(m->m_pkthdr.len >= sizeof(struct ip),("packet too short")); /* NB: ip_input() flips it into host endian. XXX Need more checking. */ - if (m->m_len < sizeof (struct ip)) { + if (m->m_len >= sizeof (struct ip)) { struct ip *ip = mtod(m, struct ip *); if (ip->ip_off & (IP_MF | IP_OFFMASK)) goto done; |