1 files changed, 6 insertions, 0 deletions

diff --git a/net/x25/x25_dev.c b/net/x25/x25_dev.c
index e547ca1578c..fa2b41888bd 100644
--- a/net/x25/x25_dev.c
+++ b/net/x25/x25_dev.c
@@ -32,6 +32,9 @@ static int x25_receive_data(struct sk_buff *skb, struct x25_neigh *nb)
         unsigned short frametype;
         unsigned int lci;
 
+        if (!pskb_may_pull(skb, X25_STD_MIN_LEN))
+                return 0;
+
         frametype = skb->data[2];
         lci = ((skb->data[0] << 8) & 0xF00) + ((skb->data[1] << 0) & 0x0FF);
 
@@ -115,6 +118,9 @@ int x25_lapb_receive_frame(struct sk_buff *skb, struct net_device *dev,
                 goto drop;
         }
 
+        if (!pskb_may_pull(skb, 1))
+                return 0;
+
         switch (skb->data[0]) {
 
         case X25_IFACE_DATA: