ipsec-92.4.tar.gz

[apple/ipsec.git] / ipsec-tools / racoon / oakley.c

diff --git a/ipsec-tools/racoon/oakley.c b/ipsec-tools/racoon/oakley.c
index 9ab26f91405f1fe519701f6efbe14c69dd9d5115..139c3db032d0d6d7e01bba474e29666bdb9e5ae9 100644 (file)
--- a/ipsec-tools/racoon/oakley.c
+++ b/ipsec-tools/racoon/oakley.c
@@ -3510,7 +3510,7 @@ oakley_do_decrypt(iph1, msg, ivdp, ivep)
        /* do decrypt */
        new = alg_oakley_encdef_decrypt(iph1->approval->enctype,
                                        buf, iph1->key, ivdp);
-       if (new == NULL) {
+       if (new == NULL || new->v == NULL || new->l == 0) {
                plog(LLV_ERROR, LOCATION, NULL,
                        "decryption %d failed.\n", iph1->approval->enctype);
                goto end;