do not sync CHILD_SAs without an IKE_SA
authorMartin Willi <martin@strongswan.org>
Tue, 26 May 2009 18:36:39 +0000 (20:36 +0200)
committerMartin Willi <martin@revosec.ch>
Wed, 7 Apr 2010 11:55:13 +0000 (13:55 +0200)
src/charon/plugins/ha_sync/ha_sync_child.c

index 33838b8..44d130b 100644 (file)
@@ -107,7 +107,7 @@ static bool child_keys(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
 static bool child_state_change(private_ha_sync_child_t *this, ike_sa_t *ike_sa,
                                                           child_sa_t *child_sa, child_sa_state_t state)
 {
-       if (ike_sa->get_state(ike_sa) == IKE_PASSIVE)
+       if (!ike_sa || ike_sa->get_state(ike_sa) == IKE_PASSIVE)
        {       /* only sync active IKE_SAs */
                return TRUE;
        }