ike-init: Fix leak if KE payload creation fails

diff --git a/src/libcharon/sa/ikev2/tasks/ike_init.c b/src/libcharon/sa/ikev2/tasks/ike_init.c
index 28e28e410659d8aa2a153a1d4721f53956e469fc..307d99264267afefdffbb9db3be7370e1ad25118 100644 (file)
--- a/src/libcharon/sa/ikev2/tasks/ike_init.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_init.c
@@ -362,8 +362,6 @@ static bool build_payloads(private_ike_init_t *this, message_t *message)
        }
        message->add_payload(message, (payload_t*)sa_payload);
 
-       nonce_payload = nonce_payload_create(PLV2_NONCE);
-       nonce_payload->set_nonce(nonce_payload, this->my_nonce);
        ke_payload = ke_payload_create_from_diffie_hellman(PLV2_KEY_EXCHANGE,
                                                                                                           this->dh);
        if (!ke_payload)
@@ -371,6 +369,8 @@ static bool build_payloads(private_ike_init_t *this, message_t *message)
                DBG1(DBG_IKE, "creating KE payload failed");
                return FALSE;
        }
+       nonce_payload = nonce_payload_create(PLV2_NONCE);
+       nonce_payload->set_nonce(nonce_payload, this->my_nonce);
 
        if (this->old_sa)
        {       /* payload order differs if we are rekeying */