]> git.ipfire.org Git - thirdparty/strongswan.git/commitdiff
do not sync CHILD_SAs without an IKE_SA
authorMartin Willi <martin@strongswan.org>
Tue, 26 May 2009 18:36:39 +0000 (20:36 +0200)
committerMartin Willi <martin@revosec.ch>
Wed, 7 Apr 2010 11:55:13 +0000 (13:55 +0200)
src/charon/plugins/ha_sync/ha_sync_child.c

index 33838b82fa41e9768cb7f9a076e1b84c130aa520..44d130b45be6820b575aa51e2af85a556b13d5dd 100644 (file)
@@ -107,7 +107,7 @@ static bool child_keys(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
 static bool child_state_change(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
                                                           child_sa_t *child_sa, child_sa_state_t state)
 {
-       if (ike_sa->get_state(ike_sa) == IKE_PASSIVE)
+       if (!ike_sa || ike_sa->get_state(ike_sa) == IKE_PASSIVE)
        {       /* only sync active IKE_SAs */
                return TRUE;
        }