-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

diff --git a/programs/pluto/ikev2_message.c b/programs/pluto/ikev2_message.c
index 9f363a2b0f..5cfa17fb28 100644
- --- a/programs/pluto/ikev2_message.c
+++ b/programs/pluto/ikev2_message.c
@@ -999,7 +999,7 @@ struct msg_digest *reassemble_v2_incoming_fragments(struct v2_incoming_fragments
 	struct msg_digest *md = md_addref((*frags)->md);
 
 	PASSERT(logger, md->chain[ISAKMP_NEXT_v2SK] == NULL);
- -	PASSERT(logger, md->digest_roof < elemsof(md->digest));
+	PASSERT(logger, md->digest_roof <= elemsof(md->digest));
 	struct payload_digest *old_skf = md->chain[ISAKMP_NEXT_v2SKF];
 	PASSERT(logger, old_skf != NULL);
 	PEXPECT(logger, old_skf->payload.v2skf.isaskf_number == 1);
-----BEGIN PGP SIGNATURE-----
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=2Uy7
-----END PGP SIGNATURE-----