From: Tobias Brunner <tobias@strongswan.org>
Date: Mon, 31 May 2021 14:12:27 +0000 (+0200)
Subject: updown: Don't call the script for per-CPU SAs
X-Git-Tag: 6.0.2dr1~5^2~20
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=3a8bb93761dce356718929b07b4f0e62733e449c;p=thirdparty%2Fstrongswan.git

updown: Don't call the script for per-CPU SAs

Rules are installed for the fallback SA that has no CPU ID assigned.
---

diff --git a/src/libcharon/plugins/updown/updown_listener.c b/src/libcharon/plugins/updown/updown_listener.c
index f4ab964e99..a62184a268 100644
--- a/src/libcharon/plugins/updown/updown_listener.c
+++ b/src/libcharon/plugins/updown/updown_listener.c
@@ -435,6 +435,11 @@ METHOD(listener_t, child_updown, bool,
 	enumerator_t *enumerator;
 	child_cfg_t *config;
 
+	if (child_sa->get_cpu(child_sa) != CPU_ID_MAX)
+	{	/* don't call the script for per-CPU SAs */
+		return TRUE;
+	}
+
 	config = child_sa->get_config(child_sa);
 	if (config->get_updown(config))
 	{