diff --git a/sys/net/gnrc/network_layer/ipv6/ext/frag/gnrc_ipv6_ext_frag.c b/sys/net/gnrc/network_layer/ipv6/ext/frag/gnrc_ipv6_ext_frag.c index 2f5124363cfa..c57407729e23 100644 --- a/sys/net/gnrc/network_layer/ipv6/ext/frag/gnrc_ipv6_ext_frag.c +++ b/sys/net/gnrc/network_layer/ipv6/ext/frag/gnrc_ipv6_ext_frag.c @@ -711,6 +711,7 @@ static gnrc_pktsnip_t *_completed(gnrc_ipv6_ext_frag_rbuf_t *rbuf) /* clist: first element is second element ;-) (from next of head) */ gnrc_ipv6_ext_frag_limits_t *ptr = (gnrc_ipv6_ext_frag_limits_t *)rbuf->limits.next->next; + /* ptr should not be NULL at this point so it is safe to dereference with ptr->start here */ if (rbuf->last && (ptr->start == 0)) { gnrc_pktsnip_t *res = NULL;