From: Martin Willi <martin@strongswan.org>
Date: Tue, 26 May 2009 18:36:39 +0000 (+0200)
Subject: do not sync CHILD_SAs without an IKE_SA
X-Git-Tag: 4.4.0~94
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=b1d495f469374bad284a41bb0fb9bbde744ee893;p=thirdparty%2Fstrongswan.git

do not sync CHILD_SAs without an IKE_SA
---

diff --git a/src/charon/plugins/ha_sync/ha_sync_child.c b/src/charon/plugins/ha_sync/ha_sync_child.c
index 33838b82fa..44d130b45b 100644
--- a/src/charon/plugins/ha_sync/ha_sync_child.c
+++ b/src/charon/plugins/ha_sync/ha_sync_child.c
@@ -107,7 +107,7 @@ static bool child_keys(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
 static bool child_state_change(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
 							   child_sa_t *child_sa, child_sa_state_t state)
 {
-	if (ike_sa->get_state(ike_sa) == IKE_PASSIVE)
+	if (!ike_sa || ike_sa->get_state(ike_sa) == IKE_PASSIVE)
 	{	/* only sync active IKE_SAs */
 		return TRUE;
 	}