diff --git a/bpf/lib/encrypt.h b/bpf/lib/encrypt.h
index 0e863143b645..f01de3a35980 100644
--- a/bpf/lib/encrypt.h
+++ b/bpf/lib/encrypt.h
@@ -40,7 +40,7 @@ do_decrypt(struct __ctx_buff *ctx, __u16 proto)
 #endif
 #ifdef ENABLE_IPV4
 	case bpf_htons(ETH_P_IP):
-		if (!revalidate_data(ctx, &data, &data_end, &ip4)) {
+		if (!revalidate_data_pull(ctx, &data, &data_end, &ip4)) {
 			ctx->mark = 0;
 			return CTX_ACT_OK;
 		}