[Todd C. Miller]

Merge two identical if() statements.  The change in ip_spd.c 1.59
makes it appear that there is a cut & pasto.  We should merge the
two identical and adjacent if() statements to avoid confusing people
(and static analyzers).

 - todd

Index: sys/netinet/ip_spd.c
===================================================================
RCS file: /cvs/src/sys/netinet/ip_spd.c,v
retrieving revision 1.83
diff -u -p -r1.83 ip_spd.c
--- sys/netinet/ip_spd.c        16 Apr 2015 19:24:13 -0000      1.83
+++ sys/netinet/ip_spd.c        30 Apr 2015 16:19:00 -0000
@@ -687,15 +687,13 @@ ipsp_acquire_sa(struct ipsec_policy *ipo
                if (ipsp_is_unspecified(ipo->ipo_dst)) {
                        ipa->ipa_info.sen_ip_src = ddst->sen_ip_src;
                        ipa->ipa_mask.sen_ip_src.s_addr = INADDR_BROADCAST;
-               } else {
-                       ipa->ipa_info.sen_ip_src = ipo->ipo_addr.sen_ip_src;
-                       ipa->ipa_mask.sen_ip_src = ipo->ipo_mask.sen_ip_src;
-               }
 
-               if (ipsp_is_unspecified(ipo->ipo_dst)) {
                        ipa->ipa_info.sen_ip_dst = ddst->sen_ip_dst;
                        ipa->ipa_mask.sen_ip_dst.s_addr = INADDR_BROADCAST;
                } else {
+                       ipa->ipa_info.sen_ip_src = ipo->ipo_addr.sen_ip_src;
+                       ipa->ipa_mask.sen_ip_src = ipo->ipo_mask.sen_ip_src;
+
                        ipa->ipa_info.sen_ip_dst = ipo->ipo_addr.sen_ip_dst;
                        ipa->ipa_mask.sen_ip_dst = ipo->ipo_mask.sen_ip_dst;
                }