Comment by Thangorodrim

Looking only at that diff, the fix is a break.

It inverts the sense of the test so that the authenticator of the packet is used even if the tag is null.