child-sa: No need to attempt to update policies if none are configured

diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c
index 2f61802f5effeab18af58c20ff0daef90a4c59f3..d51f530dbfa16354d0f25dbe1546c451654d6ae8 100644 (file)
--- a/src/libcharon/sa/child_sa.c
+++ b/src/libcharon/sa/child_sa.c
@@ -1542,7 +1542,8 @@ METHOD(child_sa_t, update, status_t,
                                                                                                        OPT_PROXY_MODE);
 
        if (!this->config->has_option(this->config, OPT_NO_POLICIES) &&
-               require_policy_update())
+               require_policy_update() && array_count(this->my_ts) &&
+               array_count(this->other_ts))
        {
                ipsec_sa_cfg_t my_sa, other_sa;
                enumerator_t *enumerator;