From 942169f742f44a87a432df90c6ab25d63ef61d85 Mon Sep 17 00:00:00 2001
From: Sam Leffler <sam@ucbvax.Berkeley.EDU>
Date: Sat, 14 Apr 1984 17:51:06 -0800
Subject: [PATCH] check ip option lengths (from rws@mit-bold)

SCCS-vsn: sys/netinet/ip_input.c 6.2
---
 usr/src/sys/netinet/ip_input.c | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/usr/src/sys/netinet/ip_input.c b/usr/src/sys/netinet/ip_input.c
index 8dd3cd0fad..eced8e3a9a 100644
--- a/usr/src/sys/netinet/ip_input.c
+++ b/usr/src/sys/netinet/ip_input.c
@@ -1,4 +1,4 @@
-/*	ip_input.c	6.1	83/08/16	*/
+/*	ip_input.c	6.2	84/04/14	*/
 
 #include "../h/param.h"
 #include "../h/systm.h"
@@ -462,8 +462,11 @@ ip_dooptions(ip)
 			break;
 		if (opt == IPOPT_NOP)
 			optlen = 1;
-		else
+		else {
 			optlen = cp[1];
+			if (optlen <= 0)
+				break;
+		}
 		switch (opt) {
 
 		default:
-- 
2.20.1