From 2a6334396839ab7725bff686cb0ab3eb6dce5094 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 27 Mar 2026 12:28:22 +0100
Subject: [PATCH] trap-manager: Ignore acquires without selectors for wildcard
 traps

We need to know the actual destination address to process these.
---
 src/libcharon/sa/trap_manager.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/libcharon/sa/trap_manager.c b/src/libcharon/sa/trap_manager.c
index 5789b3cc3..90a29b29b 100644
--- a/src/libcharon/sa/trap_manager.c
+++ b/src/libcharon/sa/trap_manager.c
@@ -557,6 +557,14 @@ METHOD(trap_manager_t, acquire, void,
 	}
 	wildcard = found->wildcard;
 
+	if (wildcard && (!data->dst || !data->src))
+	{
+		DBG1(DBG_CFG, "unable to process acquire without selectors for "
+			 "trap without destination address (reqid %u)", reqid);
+		this->lock->unlock(this->lock);
+		return;
+	}
+
 	this->mutex->lock(this->mutex);
 	if (wildcard)
 	{