child-create: Fix crash when retrying CHILD_SA rekeying due to a DH group mismatch
authorTobias Brunner <tobias@strongswan.org>
Tue, 28 Jul 2015 13:10:17 +0000 (15:10 +0200)
committerTobias Brunner <tobias@strongswan.org>
Fri, 21 Aug 2015 14:14:07 +0000 (16:14 +0200)
If the responder declines our KE payload during a CHILD_SA rekeying migrate()
is called to reuse the child-create task.  But the child-rekey task then
calls the same method again.

Fixes: 32df0d81fb46 ("child-create: Destroy nonceg in migrate()")

src/libcharon/sa/ikev2/tasks/child_create.c

index e0f930c..ee5086f 100644 (file)
@@ -1596,6 +1596,7 @@ METHOD(task_t, migrate, void,
        this->tsi = NULL;
        this->tsr = NULL;
        this->dh = NULL;
+       this->nonceg = NULL;
        this->child_sa = NULL;
        this->mode = MODE_TUNNEL;
        this->ipcomp = IPCOMP_NONE;