]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix memory leak in x509_verify_cert_ku()
authorSteffan Karger <steffan@karger.me>
Sun, 7 May 2017 11:01:18 +0000 (13:01 +0200)
committerDavid Sommerseth <davids@openvpn.net>
Mon, 8 May 2017 16:06:29 +0000 (18:06 +0200)
commitd7a13af789daecf38fb6a3ca2d6e6cf0ab939a73
treeafd19b014bf1f1496a81124ce3ef0b3668e656a0
parentf5d41cc68407f77f8fab41e242fa1d651c55c257
Fix memory leak in x509_verify_cert_ku()

If keyUsage was only required to be present, but no specific value was
required, we would omit to free the extracted string.  This happens as of
2.4.1, if --remote-cert-tls is used.  In that case we leak a bit of
memory on each TLS (re)negotiation.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <1494154878-18403-1-git-send-email-steffan@karger.me>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14563.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
(cherry picked from commit 7b94d3bbbea46efcea12e1df24da52fe508d0173)
Changes.rst
src/openvpn/ssl_verify_openssl.c