gtp: ensure sufficient room for the header in gtp0_udp_encap_recv

1 files changed, 4 insertions, 0 deletions

diff --git a/gtp.c b/gtp.c
index 6a1feee..06a1ed6 100644
--- a/gtp.c
+++ b/gtp.c
@@ -227,6 +227,10 @@ static int gtp0_udp_encap_recv(struct gtp_instance *gti, struct sk_buff *skb)
 
 	pr_info("gtp0 udp received\n");
 
+	/* check for sufficient header size */
+	if (!pskb_may_pull(skb, sizeof(*gtp0)))
+		return -1;
+
 	gtp0 = (struct gtp0_header *)skb->data;
 
 	/* check for GTP Version 0 */