[src/trunk]: src/crypto/dist/ipsec-tools/src/setkey Fix parsing ah without a key

[ozaki-r <ozaki-r%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/572ad1fcfc90
branches:  trunk
changeset: 352860:572ad1fcfc90
user:      ozaki-r <ozaki-r%NetBSD.org@localhost>
date:      Thu Apr 13 01:19:17 2017 +0000

description:
Fix parsing ah without a key

diffstat:

 crypto/dist/ipsec-tools/src/setkey/parse.y |  10 ++++++++--
 1 files changed, 8 insertions(+), 2 deletions(-)

diffs (24 lines):

diff -r 5e94cb1d667c -r 572ad1fcfc90 crypto/dist/ipsec-tools/src/setkey/parse.y
--- a/crypto/dist/ipsec-tools/src/setkey/parse.y        Thu Apr 13 00:47:33 2017 +0000
+++ b/crypto/dist/ipsec-tools/src/setkey/parse.y        Thu Apr 13 01:19:17 2017 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: parse.y,v 1.17 2014/09/10 21:04:08 christos Exp $      */
+/*     $NetBSD: parse.y,v 1.18 2017/04/13 01:19:17 ozaki-r Exp $       */
 
 /*     $KAME: parse.y,v 1.81 2003/07/01 04:01:48 itojun Exp $  */
 
@@ -497,7 +497,13 @@
                        p_alg_auth = $1;
 
                        p_key_auth_len = 0;
-                       p_key_auth = NULL;
+                       p_key_auth = "";
+                       if (ipsec_check_keylen(SADB_EXT_SUPPORTED_AUTH,
+                           p_alg_auth,
+                           PFKEY_UNUNIT64(p_key_auth_len)) < 0) {
+                               yyerror(ipsec_strerror());
+                               return -1;
+                       }
                }
        ;