ikev2: fix removing of expired SAs 24/27024/2
authorFilip Tehlar <ftehlar@cisco.com>
Sat, 9 May 2020 03:32:28 +0000 (03:32 +0000)
committerNeale Ranns <nranns@cisco.com>
Wed, 13 May 2020 06:50:18 +0000 (06:50 +0000)
Type: fix

Change-Id: Idf9b0ffb4e3a0113bece80d1195192bdf46feb89
Signed-off-by: Filip Tehlar <ftehlar@cisco.com>
src/plugins/ikev2/ikev2.c

index bb620a8..068ae7c 100644 (file)
@@ -4054,7 +4054,6 @@ ikev2_mngr_process_fn (vlib_main_t * vm, vlib_node_runtime_t * rt,
              if (p)
                {
                  ikev2_initiate_sa_init (vm, p->name);
-                 continue;
                }
            }
          vec_foreach (c, sa->childs)
@@ -4062,6 +4061,7 @@ ikev2_mngr_process_fn (vlib_main_t * vm, vlib_node_runtime_t * rt,
          hash_unset (tkm->sa_by_rspi, sa->rspi);
          pool_put (tkm->sas, sa);
        }
+       vec_free (to_be_deleted);
       }
 
       /* process ipsec sas */