diff options
| -rw-r--r-- | net/ipv6/ip6_tunnel.c | 1 | ||||
| -rw-r--r-- | net/ipv6/ip6_vti.c | 1 | 
2 files changed, 2 insertions, 0 deletions
diff --git a/net/ipv6/ip6_tunnel.c b/net/ipv6/ip6_tunnel.c index a9d06d4dd057..99179b9c8384 100644 --- a/net/ipv6/ip6_tunnel.c +++ b/net/ipv6/ip6_tunnel.c @@ -901,6 +901,7 @@ static int ipxip6_rcv(struct sk_buff *skb, u8 ipproto,  			goto drop;  		if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb))  			goto drop; +		ipv6h = ipv6_hdr(skb);  		if (!ip6_tnl_rcv_ctl(t, &ipv6h->daddr, &ipv6h->saddr))  			goto drop;  		if (iptunnel_pull_header(skb, 0, tpi->proto, false)) diff --git a/net/ipv6/ip6_vti.c b/net/ipv6/ip6_vti.c index eeaf7455d51e..706fe42e4928 100644 --- a/net/ipv6/ip6_vti.c +++ b/net/ipv6/ip6_vti.c @@ -318,6 +318,7 @@ static int vti6_rcv(struct sk_buff *skb)  			return 0;  		} +		ipv6h = ipv6_hdr(skb);  		if (!ip6_tnl_rcv_ctl(t, &ipv6h->daddr, &ipv6h->saddr)) {  			t->dev->stats.rx_dropped++;  			rcu_read_unlock();  | 
