Incomplete TCP options

Hi,

I am reading tcp_input.c and searching for the linux
behavior when you have a tcp header length for example
of 24 bytes (4 bytes of options) but that you have
only 2 bytes of options (and no padding)

If i refer to tcp_parse_options, there will be a
problem as the *ptr++ incrementation will get out the
buffer which hold the packet.

Can you tell me a little more on that ?