From: Martin Willi <martin@revosec.ch>
Date: Mon, 18 Feb 2013 10:45:01 +0000 (+0100)
Subject: Don't close underlying file descriptor before destroying a tls_socket
X-Git-Tag: 5.0.3dr3~4^2~11
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=55854ecc25c0984a39ed6ff247c7ba772d0fbe11;p=thirdparty%2Fstrongswan.git

Don't close underlying file descriptor before destroying a tls_socket

tls_socket cleanup usually sends a TLS close notify, for which it uses a valid
socket.
---

diff --git a/src/libpttls/pt_tls_client.c b/src/libpttls/pt_tls_client.c
index 948d929820..7f91ae6915 100644
--- a/src/libpttls/pt_tls_client.c
+++ b/src/libpttls/pt_tls_client.c
@@ -276,8 +276,11 @@ METHOD(pt_tls_client_t, destroy, void,
 {
 	if (this->tls)
 	{
-		close(this->tls->get_fd(this->tls));
+		int fd;
+
+		fd = this->tls->get_fd(this->tls);
 		this->tls->destroy(this->tls);
+		close(fd);
 	}
 	this->address->destroy(this->address);
 	this->id->destroy(this->id);