diff --git a/net/sctp/inqueue.c b/net/sctp/inqueue.c index 7182c5a45..b8a01211d 100644 --- a/net/sctp/inqueue.c +++ b/net/sctp/inqueue.c @@ -198,7 +198,7 @@ struct sctp_chunk *sctp_inq_pop(struct sctp_inq *queue) } chunk->chunk_hdr = ch; - chunk->chunk_end = ((__u8 *)ch) + SCTP_PAD4(ntohs(ch->length)); + chunk->chunk_end = ((__u8 *)ch) + sizeof(struct sctp_chunkhdr); skb_pull(chunk->skb, sizeof(*ch)); chunk->subh.v = NULL; /* Subheader is no longer valid. */