-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

diff --git a/programs/pluto/ikev2_ts.c b/programs/pluto/ikev2_ts.c
index 3f7519ca38..f06c40ba46 100644
- --- a/programs/pluto/ikev2_ts.c
+++ b/programs/pluto/ikev2_ts.c
@@ -437,6 +437,11 @@ static bool v2_parse_tss(struct payload_digest *const ts_pd,
 		d = pbs_in_struct(&ts_pd->pbs, &ikev2_ts_header_desc,
 			  &ts_h, sizeof(ts_h), &ts_body_pbs);
 
+		if (d != NULL) {
+			log_diag(RC_LOG, logger, &d, "%s", "");
+			return false;
+		}
+
 		switch (ts_h.isath_type) {
 		case IKEv2_TS_IPV4_ADDR_RANGE:
 		case IKEv2_TS_IPV6_ADDR_RANGE:
-----BEGIN PGP SIGNATURE-----
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=1Xy5
-----END PGP SIGNATURE-----