BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer

When calling ssl_get0_issuer_chain, if akid is not NULL but its keyid
is, then the AUTHORITY_KEYID is not freed.

This patch can be backported to all stable branches.

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 2f76bb98669749add3eb61f9c03cb88a63099fb1..801405b309ae1c1b0fdf91aefd71384678ce4fb9 100644 (file)
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -7231,8 +7231,8 @@ int ssl_load_global_issuer_from_BIO(BIO *in, char *fp, char **err)
                                break;
                        }
                }
-               AUTHORITY_KEYID_free(akid);
        }
+       AUTHORITY_KEYID_free(akid);
        return issuer;
 }