X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?p=kvmfornfv.git;a=blobdiff_plain;f=kernel%2Finclude%2Fnet%2Fcipso_ipv4.h;h=a34b141f125f0032662f147b598c9fef4fb4bcef;hp=3ebb168b9afc68ad639b5d32f6182a845c83d759;hb=52f993b8e89487ec9ee15a7fb4979e0f09a45b27;hpb=c189ccac5702322ed843fe17057035b7222a59b6

diff --git a/kernel/include/net/cipso_ipv4.h b/kernel/include/net/cipso_ipv4.h
index 3ebb168b9..a34b141f1 100644
--- a/kernel/include/net/cipso_ipv4.h
+++ b/kernel/include/net/cipso_ipv4.h
@@ -309,6 +309,10 @@ static inline int cipso_v4_validate(const struct sk_buff *skb,
 	}
 
 	for (opt_iter = 6; opt_iter < opt_len;) {
+		if (opt_iter + 1 == opt_len) {
+			err_offset = opt_iter;
+			goto out;
+		}
 		tag_len = opt[opt_iter + 1];
 		if ((tag_len == 0) || (tag_len > (opt_len - opt_iter))) {
 			err_offset = opt_iter + 1;