===== net/ipv6/esp6.c 1.36 vs edited ===== --- 1.36/net/ipv6/esp6.c 2004-08-12 19:59:52 +10:00 +++ edited/net/ipv6/esp6.c 2004-08-15 05:54:35 +10:00 @@ -302,8 +302,9 @@ { struct esp_data *esp = NULL; + /* null auth and encryption can have zero length keys */ if (x->aalg) { - if (x->aalg->alg_key_len == 0 || x->aalg->alg_key_len > 512) + if (x->aalg->alg_key_len > 512) goto error; } if (x->ealg == NULL)