From: Tobias Brunner <tobias@strongswan.org>
Date: Thu, 4 Dec 2014 10:32:22 +0000 (+0100)
Subject: ikev2: Fix handling of more than one hash-and-URL certificate payloads
X-Git-Tag: 5.2.2rc1~38
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7459f3a5ac80b48f25a43570d695c586684e849e;p=thirdparty%2Fstrongswan.git

ikev2: Fix handling of more than one hash-and-URL certificate payloads
---

diff --git a/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c b/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
index 0dac975e7e..ca17494de8 100644
--- a/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
+++ b/src/libcharon/sa/ikev2/tasks/ike_cert_pre.c
@@ -229,12 +229,12 @@ static void process_x509(cert_payload_t *payload, auth_cfg_t *auth,
 			return;
 		}
 		url = strdup(url);
-		if (first)
+		if (*first)
 		{	/* first URL is for an end entity certificate */
 			DBG1(DBG_IKE, "received hash-and-url for end entity cert \"%s\"",
 				 url);
 			auth->add(auth, AUTH_HELPER_SUBJECT_HASH_URL, url);
-			first = FALSE;
+			*first = FALSE;
 		}
 		else
 		{