Corrected memory leak in privkey deinitialization. Reported by Dan Winship.

diff --git a/NEWS b/NEWS
index 1e996cdb8896f5dfb77a08315afaf5c85fbcb5ad..eedee7b33fb1afe6847a2ea73284eede27623310 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,9 @@ number of discarded records in a DTLS session.
 ** libgnutls: All functions related to RSA-EXPORT were deprecated.
 Support for RSA-EXPORT ciphersuites will be ceased in future versions.
 
+** libgnutls: Memory leak fixes in credentials private key 
+deinitialization. Reported by Dan Winship.
+
 ** libgnutls: Memory leak fixes in ECC ciphersuites.
 
 ** libgnutls: Do not send an empty extension structure in server 

diff --git a/lib/auth/cert.c b/lib/auth/cert.c
index e69279793b66e5705b655004c280d97a144af6ed..dd321da6a2c5dacb00492d9219120aebbb7feb27 100644 (file)
--- a/lib/auth/cert.c
+++ b/lib/auth/cert.c
@@ -639,6 +639,7 @@ cleanup:
             {
               gnutls_x509_crt_deinit (st2.cert.x509[i]);
             }
+          gnutls_free(st2.cert.x509);
         }
     }
   else
@@ -2053,6 +2054,7 @@ _gnutls_selected_certs_deinit (gnutls_session_t session)
       session->internals.selected_cert_list = NULL;
       session->internals.selected_cert_list_length = 0;
 
+      gnutls_privkey_deinit(session->internals.selected_key);
       session->internals.selected_key = NULL;
     }