do not sync CHILD_SAs without an IKE_SA
This commit is contained in:
committed by
Martin Willi
parent
5b7c0f4409
commit
b1d495f469
@@ -107,7 +107,7 @@ static bool child_keys(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
|
||||
static bool child_state_change(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
|
||||
child_sa_t *child_sa, child_sa_state_t state)
|
||||
{
|
||||
if (ike_sa->get_state(ike_sa) == IKE_PASSIVE)
|
||||
if (!ike_sa || ike_sa->get_state(ike_sa) == IKE_PASSIVE)
|
||||
{ /* only sync active IKE_SAs */
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user