Clean up IKE_SA state if IKE_SA_INIT request does not have message ID 0

diff --git a/src/libcharon/sa/ikev2/task_manager_v2.c b/src/libcharon/sa/ikev2/task_manager_v2.c
index 29d8d830e5bd7390774055bb77c19461c019d6fc..a53c06bf7d0319735e83f325ad9e43f22b1cb8f5 100644 (file)
--- a/src/libcharon/sa/ikev2/task_manager_v2.c
+++ b/src/libcharon/sa/ikev2/task_manager_v2.c
@@ -1175,6 +1175,10 @@ METHOD(task_manager_t, process_message, status_t,
                {
                        DBG1(DBG_IKE, "received message ID %d, expected %d. Ignored",
                                 mid, this->responding.mid);
+                       if (msg->get_exchange_type(msg) == IKE_SA_INIT)
+                       {       /* clean up IKE_SA state if IKE_SA_INIT has invalid msg ID */
+                               return DESTROY_ME;
+                       }
                }
        }
        else