ip/xfrm: Do not print a zero-length algorithm key

Signed-off-by: David Ward <david.ward@ll.mit.edu>

diff --git a/ip/ipxfrm.c b/ip/ipxfrm.c
index 257693878629d398048e518a075ba76a32175014..31135731ff06bd0546175bfec47e664eeeea9d62 100644 (file)
--- a/ip/ipxfrm.c
+++ b/ip/ipxfrm.c
@@ -536,12 +536,14 @@ static void __xfrm_algo_print(struct xfrm_algo *algo, int type, int len,
                goto fin;
        }
 
-       fprintf(fp, "0x");
-       for (i = 0; i < keylen; i ++)
-               fprintf(fp, "%.2x", (unsigned char)algo->alg_key[i]);
+       if (keylen > 0) {
+               fprintf(fp, "0x");
+               for (i = 0; i < keylen; i ++)
+                       fprintf(fp, "%.2x", (unsigned char)algo->alg_key[i]);
 
-       if (show_stats > 0)
-               fprintf(fp, " (%d bits)", algo->alg_key_len);
+               if (show_stats > 0)
+                       fprintf(fp, " (%d bits)", algo->alg_key_len);
+       }
 
  fin:
        if (newline)