Bug 3817: Memory leak in SSL cert validate for alt_name peer certs

Inside function Ssl::matchX509CommonNames which checks a domain name against
certificate common name and alternate names, if the domain matches any of the
alternate names the function return without releasing allocated data.

diff --git a/src/ssl/support.cc b/src/ssl/support.cc
index 3c86bbc490a921a4cc7be5a6c0aebb54a2d89d23..2fa4052cc142ad353097f1e64bb03f7705c7b79a 100644 (file)
--- a/src/ssl/support.cc
+++ b/src/ssl/support.cc
@@ -177,8 +177,10 @@ int Ssl::matchX509CommonNames(X509 *peer_cert, void *check_data, int (*check_fun
             }
             ASN1_STRING *cn_data = check->d.dNSName;
 
-            if ( (*check_func)(check_data, cn_data) == 0)
+            if ( (*check_func)(check_data, cn_data) == 0) {
+                sk_GENERAL_NAME_pop_free(altnames, GENERAL_NAME_free);
                 return 1;
+            }
         }
         sk_GENERAL_NAME_pop_free(altnames, GENERAL_NAME_free);
     }