From 20d702b90e6088fd707978dd27274ebe004a01a8 Mon Sep 17 00:00:00 2001
From: Pablo Neira Ayuso <pablo@gnumonks.org>
Date: Thu, 20 Feb 2014 12:18:13 +0100
Subject: [PATCH] gtp: ensure sufficient room for the header in
 gtp0_udp_encap_recv

---
 gtp.c | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/gtp.c b/gtp.c
index 6a1feee..06a1ed6 100644
--- a/gtp.c
+++ b/gtp.c
@@ -227,6 +227,10 @@ static int gtp0_udp_encap_recv(struct gtp_instance *gti, struct sk_buff *skb)
 
 	pr_info("gtp0 udp received\n");
 
+	/* check for sufficient header size */
+	if (!pskb_may_pull(skb, sizeof(*gtp0)))
+		return -1;
+
 	gtp0 = (struct gtp0_header *)skb->data;
 
 	/* check for GTP Version 0 */