From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 15 Oct 2020 11:54:15 +0000 (+0200)
Subject: child-sa: No need to attempt to update policies if none are configured
X-Git-Tag: 5.9.1rc1~11
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=29b491ed9cfde5b4b67130926e71b1029aeb147a;p=thirdparty%2Fstrongswan.git

child-sa: No need to attempt to update policies if none are configured
---

diff --git a/src/libcharon/sa/child_sa.c b/src/libcharon/sa/child_sa.c
index 2f61802f5e..d51f530dbf 100644
--- a/src/libcharon/sa/child_sa.c
+++ b/src/libcharon/sa/child_sa.c
@@ -1542,7 +1542,8 @@ METHOD(child_sa_t, update, status_t,
 													OPT_PROXY_MODE);
 
 	if (!this->config->has_option(this->config, OPT_NO_POLICIES) &&
-		require_policy_update())
+		require_policy_update() && array_count(this->my_ts) &&
+		array_count(this->other_ts))
 	{
 		ipsec_sa_cfg_t my_sa, other_sa;
 		enumerator_t *enumerator;