From a627e31f463367d83be5814aff8ddbceb725f4ed Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Thu, 7 May 2009 15:53:45 +0200 Subject: [PATCH] properly delete IKE_SA if IKE_SA_INIT processing failed --- src/charon/sa/ike_sa.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/src/charon/sa/ike_sa.c b/src/charon/sa/ike_sa.c index b8e8213b3..126011e0b 100644 --- a/src/charon/sa/ike_sa.c +++ b/src/charon/sa/ike_sa.c @@ -1424,6 +1424,11 @@ static status_t process_message(private_ike_sa_t *this, message_t *message) exchange_type_names, message->get_exchange_type(message), message->get_request(message) ? "request" : "response", message->get_message_id(message)); + + if (this->state == IKE_CREATED) + { /* invalid initiation attempt, close SA */ + return DESTROY_ME; + } return status; } else