-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

diff --git a/programs/pluto/ikev2_ts.c b/programs/pluto/ikev2_ts.c
index 3f7519ca38..f06c40ba46 100644
- --- a/programs/pluto/ikev2_ts.c
+++ b/programs/pluto/ikev2_ts.c
@@ -437,6 +437,11 @@ static bool v2_parse_tss(struct payload_digest *const ts_pd,
 		d = pbs_in_struct(&ts_pd->pbs, &ikev2_ts_header_desc,
 			  &ts_h, sizeof(ts_h), &ts_body_pbs);
 
+		if (d != NULL) {
+			llog_diag(RC_LOG, logger, &d, "%s", "");
+			return false;
+		}
+
 		switch (ts_h.isath_type) {
 		case IKEv2_TS_IPV4_ADDR_RANGE:
 		case IKEv2_TS_IPV6_ADDR_RANGE:
-----BEGIN PGP SIGNATURE-----
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=l+Ma
-----END PGP SIGNATURE-----