1 files changed, 3 insertions, 1 deletions

diff --git a/net/key/af_key.c b/net/key/af_key.c
index 5651c29cb5bd..4af1e1d60b9f 100644
--- a/net/key/af_key.c
+++ b/net/key/af_key.c
@@ -1951,8 +1951,10 @@ parse_ipsecrequest(struct xfrm_policy *xp, struct sadb_x_ipsecrequest *rq)
 
         if (rq->sadb_x_ipsecrequest_mode == 0)
                 return -EINVAL;
+        if (!xfrm_id_proto_valid(rq->sadb_x_ipsecrequest_proto))
+                return -EINVAL;
 
-        t->id.proto = rq->sadb_x_ipsecrequest_proto; /* XXX check proto */
+        t->id.proto = rq->sadb_x_ipsecrequest_proto;
         if ((mode = pfkey_mode_to_xfrm(rq->sadb_x_ipsecrequest_mode)) < 0)
                 return -EINVAL;
         t->mode = mode;