In stroke counters, check if we have an IKE_SA before getting the name from it

Fixes a segfault when receiving an invalid IKE SPI, where we don't have an
IKE_SA for the raised alert.

diff --git a/src/libcharon/plugins/stroke/stroke_counter.c b/src/libcharon/plugins/stroke/stroke_counter.c
index ff4746bf41b6c46f9b79a32beb3095dc9de85b95..747d51d02bd3a3f6f7b600e7800a31a16569468f 100644 (file)
--- a/src/libcharon/plugins/stroke/stroke_counter.c
+++ b/src/libcharon/plugins/stroke/stroke_counter.c
@@ -113,10 +113,13 @@ static char *get_ike_sa_name(ike_sa_t *ike_sa)
 {
        peer_cfg_t *peer_cfg;
 
-       peer_cfg = ike_sa->get_peer_cfg(ike_sa);
-       if (peer_cfg)
+       if (ike_sa)
        {
-               return peer_cfg->get_name(peer_cfg);
+               peer_cfg = ike_sa->get_peer_cfg(ike_sa);
+               if (peer_cfg)
+               {
+                       return peer_cfg->get_name(peer_cfg);
+               }
        }
        return NULL;
 }