"secretlen" can't be zero, either

diff --git a/src/protocols/tacacs/base.c b/src/protocols/tacacs/base.c
index 2289b36158365f3cd5940fd8cde0909d94a575bb..b27dfe6cdae22a8c4d6861dd1ca174be892fbac1 100644 (file)
--- a/src/protocols/tacacs/base.c
+++ b/src/protocols/tacacs/base.c
@@ -143,7 +143,7 @@ int fr_tacacs_body_xor(fr_tacacs_packet_t const *pkt, uint8_t *body, size_t body
        int pad_offset;
        size_t pos;
 
-       if (!secret) {
+       if (!secret || !secretlen) {
                if (pkt->hdr.flags & FR_TAC_PLUS_UNENCRYPTED_FLAG)
                        return 0;
                else {