From: Martin Willi <martin@revosec.ch>
Date: Wed, 9 Apr 2014 08:42:36 +0000 (+0200)
Subject: kernel-wfp: Clone acquire traffic selectors only if they exist
X-Git-Tag: 5.2.0dr6~22^2~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=75afbeee218f16a96cb00b1e776620b7e313841a;p=thirdparty%2Fstrongswan.git

kernel-wfp: Clone acquire traffic selectors only if they exist
---

diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
index 4f1fc7590a..5b44f85b52 100644
--- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
+++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
@@ -1503,8 +1503,10 @@ static void acquire(private_kernel_wfp_ipsec_t *this, UINT64 filter_id,
 
 	if (reqid)
 	{
+		src = src ? src->clone(src) : NULL;
+		dst = dst ? dst->clone(dst) : NULL;
 		hydra->kernel_interface->acquire(hydra->kernel_interface, reqid,
-										 src->clone(src), dst->clone(dst));
+										 src, dst);
 	}
 }