libipsec: Properly handle expiration if no lifetime is set

diff --git a/src/libipsec/ipsec_sa_mgr.c b/src/libipsec/ipsec_sa_mgr.c
index 1f5d5a3..928a53d 100644 (file)
--- a/src/libipsec/ipsec_sa_mgr.c
+++ b/src/libipsec/ipsec_sa_mgr.c
@@ -332,6 +332,11 @@ static void schedule_expiration(private_ipsec_sa_mgr_t *this,
        callback_job_t *job;
        u_int32_t timeout;
 
+       if (!lifetime->time.life)
+       {       /* no expiration at all */
+               return;
+       }
+
        INIT(expired,
                .manager = this,
                .entry = entry,