BUG/MINOR: ssl: Memory leak of DH BIGNUM fields

When running HAProxy with OpenSSLv3, the two BIGNUMs used to build our
own DH parameters are not freed. It was not necessary previously because
ownership of those parameters was transferred to OpenSSL through the
DH_set0_pqg call.

This patch should be backported to 2.6.

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 6b38d4031b453d28240d10fb861bc673f1672cac..2f76bb98669749add3eb61f9c03cb88a63099fb1 100644 (file)
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -3073,6 +3073,8 @@ end:
        EVP_PKEY_CTX_free(ctx);
        OSSL_PARAM_free(params);
        OSSL_PARAM_BLD_free(tmpl);
+       BN_free(p);
+       BN_free(g);
        return pkey;
 #else