diff --git a/src/core/tcp_in.c b/src/core/tcp_in.c
index 38c39743..8b6e3ce1 100644
--- a/src/core/tcp_in.c
+++ b/src/core/tcp_in.c
@@ -1116,10 +1116,10 @@ tcp_receive(struct tcp_pcb *pcb)
                 tcp_seg_free(next);
                 if (cseg->next != NULL) {
                   next = cseg->next;
-                  if (TCP_SEQ_GT(seqno + cseg.len, next->tcphdr->seqno)) {
+                  if (TCP_SEQ_GT(seqno + cseg->len, next->tcphdr->seqno)) {
                     /* We need to trim the incoming segment. */
-                    cseg.len = next->tcphdr->seqno - seqno;
-                    pbuf_realloc(cseg.p, cseg.len);
+                    cseg->len = next->tcphdr->seqno - seqno;
+                    pbuf_realloc(cseg->p, cseg->len);
                   }
                 }
                 break;