From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Fri, 4 Feb 2022 13:21:02 +0000 (+0100)
Subject: BUG/MINOR: jwt: Missing pkey free during cleanup
X-Git-Tag: v2.6-dev2~126
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=2b5a6559460b41dd6db2740cc961b461cef12edc;p=thirdparty%2Fhaproxy.git

BUG/MINOR: jwt: Missing pkey free during cleanup

When emptying the jwt_cert_tree during deinit, the entries are freed but
not the EVP_PKEY reference they kept, leading in a memory leak.

Should be backported in 2.5.
---

diff --git a/src/jwt.c b/src/jwt.c
index 1c13209e01..848de99f64 100644
--- a/src/jwt.c
+++ b/src/jwt.c
@@ -364,6 +364,7 @@ static void jwt_deinit(void)
 	while (node) {
 		entry = ebmb_entry(node, struct jwt_cert_tree_entry, node);
 		ebmb_delete(node);
+		EVP_PKEY_free(entry->pkey);
 		ha_free(&entry);
 		node = ebmb_first(&jwt_cert_tree);
 	}