From e60913b6002bcd2eced2c30b25495d24b66e4496 Mon Sep 17 00:00:00 2001 From: Jouni Malinen Date: Tue, 16 Feb 2016 00:33:27 +0200 Subject: [PATCH] curl: Fix memory leak in subjectAltName parsing The parsed data from X509_get_ext_d2i() needs to be freed. Signed-off-by: Jouni Malinen --- src/utils/http_curl.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/src/utils/http_curl.c b/src/utils/http_curl.c index bf32ab87a..9be0111fb 100644 --- a/src/utils/http_curl.c +++ b/src/utils/http_curl.c @@ -857,8 +857,10 @@ static void parse_cert(struct http_ctx *ctx, struct http_cert *hcert, os_memset(hcert, 0, sizeof(*hcert)); *names = X509_get_ext_d2i(cert, NID_subject_alt_name, NULL, NULL); - if (*names) + if (*names) { add_alt_names(ctx, hcert, *names); + sk_GENERAL_NAME_pop_free(*names, GENERAL_NAME_free); + } add_logotype_ext(ctx, hcert, cert); } -- 2.47.2