Avoid leaking peername data via accept BIOs

Reviewed-by: Rich Salz <rsalz@openssl.org>

diff --git a/crypto/bio/bss_acpt.c b/crypto/bio/bss_acpt.c
index e426ecd7fd7efd628e01415661677c22a56d7a47..72ad6a19a913ff300c406dce54c0b11283145b1f 100644 (file)
--- a/crypto/bio/bss_acpt.c
+++ b/crypto/bio/bss_acpt.c
@@ -275,6 +275,11 @@ static int acpt_state(BIO *b, BIO_ACCEPT *c)
             BIO_clear_retry_flags(b);
             b->retry_reason = 0;
 
+            OPENSSL_free(c->cache_peer_name);
+            c->cache_peer_name = NULL;
+            OPENSSL_free(c->cache_peer_serv);
+            c->cache_peer_serv = NULL;
+
             s = BIO_accept_ex(c->accept_sock, &c->cache_peer_addr,
                               c->accepted_mode);