mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-08-08 08:07:10 +02:00
Code Issues Projects Releases Wiki Activity

BUG/MINOR: ssl: ssl_sock_load_issuer_file_into_ckch memory leak

Browse Source 
"set ssl cert <filename.issuer> <payload>" CLI command must free
previous context.

This patch should be backport to 2.1
This commit is contained in:
Emmanuel Hocdet 2020-01-16 14:45:00 +01:00 committed by William Lallemand
parent 0667faebcf
commit eb73dc34bb
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
src/ssl_sock.c
View File

@ -3237,8 +3237,11 @@ static int ssl_sock_load_issuer_file_into_ckch(const char *path, char *buf, stru
err && *err ? *err : "", path); err && *err ? *err : "", path);
goto end; goto end;
} }
ret = 0; /* no error, fill ckch with new context, old context must be free */
if (ckch->ocsp_issuer)
X509_free(ckch->ocsp_issuer);
ckch->ocsp_issuer = issuer; ckch->ocsp_issuer = issuer;
ret = 0;
end: end: