]> git.ipfire.org Git - thirdparty/openvpn.git/commit
Fix memory leak in x509_verify_cert_ku()
authorSteffan Karger <steffan@karger.me>
Sun, 7 May 2017 11:01:18 +0000 (13:01 +0200)
committerDavid Sommerseth <davids@openvpn.net>
Mon, 8 May 2017 15:55:01 +0000 (17:55 +0200)
commit7b94d3bbbea46efcea12e1df24da52fe508d0173
treef26707aa430398ab73d790df550596ba123ae921
parent69311687da55b8c0e6966b25c94c72494ea44e57
Fix memory leak in x509_verify_cert_ku()

If keyUsage was only required to be present, but no specific value was
required, we would omit to free the extracted string.  This happens as of
2.4.1, if --remote-cert-tls is used.  In that case we leak a bit of
memory on each TLS (re)negotiation.

Signed-off-by: Steffan Karger <steffan@karger.me>
Acked-by: David Sommerseth <davids@openvpn.net>
Message-Id: <1494154878-18403-1-git-send-email-steffan@karger.me>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg14563.html
Signed-off-by: David Sommerseth <davids@openvpn.net>
Changes.rst
src/openvpn/ssl_verify_openssl.c