BUG/MINOR: ssl: Fix potential leak in cli_parse_update_ocsp_response

In some extremely unlikely case (or even impossible for now), we might
exit cli_parse_update_ocsp_response without raising an error but with a
filled 'err' buffer. It was not properly free'd.

It does not need to be backported.

diff --git a/src/ssl_ocsp.c b/src/ssl_ocsp.c
index 979a87b21cff97990e9bd57c9f8f2455ed596c1c..8a7cb272765637e100823e84f770ca0bcff97f2a 100644 (file)
--- a/src/ssl_ocsp.c
+++ b/src/ssl_ocsp.c
@@ -1397,6 +1397,8 @@ static int cli_parse_update_ocsp_response(char **args, char *payload, struct app
 
        task_wakeup(ocsp_update_task, TASK_WOKEN_MSG);
 
+       free(err);
+
        return 0;
 
 end: