From 98fd5e9893df379f857dff95e8007937638213a5 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Sun, 12 Jul 2026 17:03:47 +0200
Subject: [PATCH] ha: Fix memory leak if Child SA key derivation fails

Fixes: aa334daa9bf3 ("Use a sync message cache to resynchronize IKE_SAs without rekeying")
---
 src/libcharon/plugins/ha/ha_dispatcher.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/libcharon/plugins/ha/ha_dispatcher.c b/src/libcharon/plugins/ha/ha_dispatcher.c
index 45f7770b9..dfe84ad85 100644
--- a/src/libcharon/plugins/ha/ha_dispatcher.c
+++ b/src/libcharon/plugins/ha/ha_dispatcher.c
@@ -875,6 +875,7 @@ static void process_child_add(private_ha_dispatcher_t *this,
 		child_sa->destroy(child_sa);
 		proposal->destroy(proposal);
 		charon->ike_sa_manager->checkin(charon->ike_sa_manager, ike_sa);
+		message->destroy(message);
 		return;
 	}
 	child_sa->set_proposal(child_sa, proposal);