On 26/05/2022 11:14, Fabio Estevam wrote: > Add a check for ip_len lesser than 28 and stop processing the packet > in this case. > > Such a check covers the two reported bugs. Ops, it is (ip->ip_len < 21) the condition that satisfies both cases. I will send a v3.