X-Git-Url: https://www.tinc-vpn.org/git/browse?a=blobdiff_plain;f=src%2Fsptps.c;h=8242cadf096875a202d894c423ac122bd8fd1057;hb=3a039ece25198c87e67950f0c4687587bf268075;hp=fe978441a912b62249a4f7192b1fecd189afe3a2;hpb=cc3c69c892b0dad9a6ece0a0f4ccd429a22fcbff;p=tinc

diff --git a/src/sptps.c b/src/sptps.c
index fe978441..8242cadf 100644
--- a/src/sptps.c
+++ b/src/sptps.c
@@ -447,8 +447,6 @@ static bool sptps_receive_data_datagram(sptps_t *s, const char *data, size_t len
 	memcpy(buffer, &netlen, 2);
 	memcpy(buffer + 2, data, len);
 
-	memcpy(&seqno, buffer + 2, 4);
-
 	if(!digest_verify(&s->indigest, buffer, len - 14, buffer + len - 14))
 		return error(s, EIO, "Invalid HMAC");
 
@@ -492,6 +490,7 @@ static bool sptps_receive_data_datagram(sptps_t *s, const char *data, size_t len
 		s->received++;
 
 	// Decrypt.
+	memcpy(&seqno, buffer + 2, 4);
 	cipher_set_counter(&s->incipher, &seqno, sizeof seqno);
 	if(!cipher_counter_xor(&s->incipher, buffer + 6, len - 4, buffer + 6))
 		return false;