ike-cfg: Fix memory leak when matching against ranges

traffic_selector_t::to_subnet() always sets the net/host (unless the
address family was invalid).

Fixes: 3070697f9f7c ("ike: support multiple addresses, ranges and subnets in IKE address config")

diff --git a/src/libcharon/config/ike_cfg.c b/src/libcharon/config/ike_cfg.c
index 480dd3720ee1407ee5fdec62f795b68b0e5b017a..93300781dc488b43062efcbb1d171c4a8aaae507 100644 (file)
--- a/src/libcharon/config/ike_cfg.c
+++ b/src/libcharon/config/ike_cfg.c
@@ -224,12 +224,12 @@ static u_int match(linked_list_t *hosts, linked_list_t *ranges, host_t *cand)
                        if (ts->to_subnet(ts, &host, &mask))
                        {
                                quality = max(quality, mask + 1);
-                               host->destroy(host);
                        }
                        else
                        {
                                quality = max(quality, 1);
                        }
+                       host->destroy(host);
                }
        }
        enumerator->destroy(enumerator);