From 81aee63d1968cdb5d04b7c69fcd8d43dee0dc2e5 Mon Sep 17 00:00:00 2001
From: Poul-Henning Kamp <phk@FreeBSD.org>
Date: Mon, 13 Apr 1998 17:27:08 +0000
Subject: [PATCH] Wrong header length used for certain reassembled IP packets.
 PR:		6177 Reviewed by:	phk, wollman Submitted by:	Eric
 Sprinkle <eric@ennovatenetworks.com>

---
 sys/netinet/ip_input.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/sys/netinet/ip_input.c b/sys/netinet/ip_input.c
index 2bd19fcef72..4e07424e975 100644
--- a/sys/netinet/ip_input.c
+++ b/sys/netinet/ip_input.c
@@ -31,7 +31,7 @@
  * SUCH DAMAGE.
  *
  *	@(#)ip_input.c	8.2 (Berkeley) 1/4/94
- * $Id: ip_input.c,v 1.80 1998/03/21 11:34:11 peter Exp $
+ * $Id: ip_input.c,v 1.81 1998/03/30 09:52:56 phk Exp $
  *	$ANA: ip_input.c,v 1.5 1996/09/18 14:34:59 wollman Exp $
  */
 
@@ -553,6 +553,8 @@ found:
 			ip = ip_reass((struct ipasfrag *)ip, fp, &ipq[sum]);
 			if (ip == 0)
 				return;
+			/* Get the length of the reassembled packets header */
+			hlen = IP_VHL_HL(ip->ip_vhl) << 2;
 			ipstat.ips_reassembled++;
 			m = dtom(ip);
 #ifdef IPDIVERT