Index: sys/net80211/ieee80211_crypto_tkip.c
===================================================================
--- sys/net80211/ieee80211_crypto_tkip.c	(revision 358693)
+++ sys/net80211/ieee80211_crypto_tkip.c	(working copy)
@@ -762,8 +762,8 @@
 		}
 		m = m->m_next;
 		if (m == NULL) {
-			KASSERT(data_len == 0,
-			    ("out of buffers with data_len %zu\n", data_len));
+			if (data_len != 0)
+				return (-1);	/* corrupted packet */
 			break;
 		}
 		pos = mtod(m, uint8_t *);