From: x2018 <xkernel.wang@foxmail.com>
Date: Sat, 8 Nov 2025 12:07:54 +0000 (+0800)
Subject: openssl: release ssl_session if sess_reuse_cb fails
X-Git-Tag: rc-8_18_0-1~396
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=239c3898367a67f33afa199a3cf7ec2d51d1a423;p=thirdparty%2Fcurl.git

openssl: release ssl_session if sess_reuse_cb fails

Closes #19405
---

diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
index 59fd0cbd6d..5c2711c587 100644
--- a/lib/vtls/openssl.c
+++ b/lib/vtls/openssl.c
@@ -3775,8 +3775,10 @@ ossl_init_session_and_alpns(struct ossl_ctx *octx,
             bool do_early_data = FALSE;
             if(sess_reuse_cb) {
               result = sess_reuse_cb(cf, data, &alpns, scs, &do_early_data);
-              if(result)
+              if(result) {
+                SSL_SESSION_free(ssl_session);
                 return result;
+              }
             }
             if(do_early_data) {
               /* We only try the ALPN protocol the session used before,