From: Christopher Faulet <cfaulet@haproxy.com>
Date: Tue, 31 May 2022 16:03:26 +0000 (+0200)
Subject: BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails
X-Git-Tag: v2.7-dev1~130
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=4329dcc2fcc44cfa0cc10a64c12f3f89ec118ae3;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl_ckch: Free error msg if commit changes on a CA/CRL entry fails

On the CLI, If we fail to commit changes on a CA or a CRL entry, an error
message is returned. This error must be released.

This patch must be backported as far as 2.4.
---

diff --git a/src/ssl_ckch.c b/src/ssl_ckch.c
index d0e5ce7ef9..def02657ae 100644
--- a/src/ssl_ckch.c
+++ b/src/ssl_ckch.c
@@ -2941,6 +2941,7 @@ error:
 		applet_putchk(appctx, trash);
 		free_trash_chunk(trash);
 	}
+	free(err);
 	/* error: call the release function and don't come back */
 	return 1;
 }