From 9965a64723604307cab7ba0d6d502d0de02f83b8 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Fri, 19 Jun 2026 19:43:21 +0200 Subject: [PATCH] ike-me: Fix safety check to ensure peer ID payload in ME_CONNECT request The presence of a peer ID is enforced by the message rules for ME_CONNECT, this just mirrors the safety check also present in `process_r_ms()`. Fixes: d5cc1758332e ("experimental P2P-NAT-T for IKEv2 merged back from branch") --- src/libcharon/sa/ikev2/tasks/ike_me.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libcharon/sa/ikev2/tasks/ike_me.c b/src/libcharon/sa/ikev2/tasks/ike_me.c index 0224d3c83..3339cb878 100644 --- a/src/libcharon/sa/ikev2/tasks/ike_me.c +++ b/src/libcharon/sa/ikev2/tasks/ike_me.c @@ -344,6 +344,7 @@ METHOD(task_t, process_r, status_t, { DBG1(DBG_IKE, "received ME_CONNECT without ID_PEER payload" ", aborting"); + this->invalid_syntax = TRUE; break; } this->peer_id = id_payload->get_identification(id_payload);