Do not install routes in the PF_KEY kernel interface if interface lookup failed.

diff --git a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
index dbf7721f9feef8e8838421f0538fcd9e8698a663..04abf9f4a3da6facab9a75ae87a41432b92ba942 100644 (file)
--- a/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
+++ b/src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c
@@ -1795,22 +1795,30 @@ METHOD(kernel_ipsec_t, add_policy, status_t,
                        route->dst_net = chunk_clone(policy->src.net->get_address(policy->src.net));
                        route->prefixlen = policy->src.mask;
 
-                       switch (charon->kernel_interface->add_route(charon->kernel_interface,
-                                       route->dst_net, route->prefixlen, route->gateway,
-                                       route->src_ip, route->if_name))
+                       if (route->if_name)
                        {
-                               default:
-                                       DBG1(DBG_KNL, "unable to install source route for %H",
-                                                route->src_ip);
-                                       /* FALL */
-                               case ALREADY_DONE:
-                                       /* route exists, do not uninstall */
-                                       route_entry_destroy(route);
-                                       break;
-                               case SUCCESS:
-                                       /* cache the installed route */
-                                       policy->route = route;
-                                       break;
+                               switch (charon->kernel_interface->add_route(
+                                                                       charon->kernel_interface, route->dst_net,
+                                                                       route->prefixlen, route->gateway,
+                                                                       route->src_ip, route->if_name))
+                               {
+                                       default:
+                                               DBG1(DBG_KNL, "unable to install source route for %H",
+                                                        route->src_ip);
+                                               /* FALL */
+                                       case ALREADY_DONE:
+                                               /* route exists, do not uninstall */
+                                               route_entry_destroy(route);
+                                               break;
+                                       case SUCCESS:
+                                               /* cache the installed route */
+                                               policy->route = route;
+                                               break;
+                               }
+                       }
+                       else
+                       {
+                               route_entry_destroy(route);
                        }
                }
                else