kernel-wfp: Clone acquire traffic selectors only if they exist

diff --git a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
index 4f1fc7590a0259f00a81ee372e5ef5f7a790f6f0..5b44f85b52411f74fb33364e390c71702b765834 100644 (file)
--- a/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
+++ b/src/libcharon/plugins/kernel_wfp/kernel_wfp_ipsec.c
@@ -1503,8 +1503,10 @@ static void acquire(private_kernel_wfp_ipsec_t *this, UINT64 filter_id,
 
        if (reqid)
        {
+               src = src ? src->clone(src) : NULL;
+               dst = dst ? dst->clone(dst) : NULL;
                hydra->kernel_interface->acquire(hydra->kernel_interface, reqid,
-                                                                                src->clone(src), dst->clone(dst));
+                                                                                src, dst);
        }
 }