[src/trunk]: src/sys/netipsec Accept AH with NULL algorithm of zero-length key

[ozaki-r <ozaki-r%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/5509c5c85cbb
branches:  trunk
changeset: 823251:5509c5c85cbb
user:      ozaki-r <ozaki-r%NetBSD.org@localhost>
date:      Mon Apr 17 05:48:18 2017 +0000

description:
Accept AH with NULL algorithm of zero-length key

diffstat:

 sys/netipsec/key.c |  6 +++---
 1 files changed, 3 insertions(+), 3 deletions(-)

diffs (27 lines):

diff -r 9e02e16ef035 -r 5509c5c85cbb sys/netipsec/key.c
--- a/sys/netipsec/key.c        Mon Apr 17 05:11:05 2017 +0000
+++ b/sys/netipsec/key.c        Mon Apr 17 05:48:18 2017 +0000
@@ -1,4 +1,4 @@
-/*     $NetBSD: key.c,v 1.105 2017/04/10 14:02:25 ozaki-r Exp $        */
+/*     $NetBSD: key.c,v 1.106 2017/04/17 05:48:18 ozaki-r Exp $        */
 /*     $FreeBSD: src/sys/netipsec/key.c,v 1.3.2.3 2004/02/14 22:23:23 bms Exp $        */
 /*     $KAME: key.c,v 1.191 2001/06/27 10:46:49 sakane Exp $   */
 
@@ -32,7 +32,7 @@
  */
 
 #include <sys/cdefs.h>
-__KERNEL_RCSID(0, "$NetBSD: key.c,v 1.105 2017/04/10 14:02:25 ozaki-r Exp $");
+__KERNEL_RCSID(0, "$NetBSD: key.c,v 1.106 2017/04/17 05:48:18 ozaki-r Exp $");
 
 /*
  * This code is referd to RFC 2367
@@ -6121,7 +6121,7 @@
                switch (alg) {
                case SADB_X_AALG_MD5:   *ksmin = *ksmax = 16; break;
                case SADB_X_AALG_SHA:   *ksmin = *ksmax = 20; break;
-               case SADB_X_AALG_NULL:  *ksmin = 1; *ksmax = 256; break;
+               case SADB_X_AALG_NULL:  *ksmin = 0; *ksmax = 256; break;
                default:
                        DPRINTF(("key_getsizes_ah: unknown AH algorithm %u\n",
                                alg));