From: William Lallemand <wlallemand@haproxy.com>
Date: Fri, 4 Oct 2019 15:24:39 +0000 (+0200)
Subject: BUG/MINOR: ssl: free the sni_keytype nodes
X-Git-Tag: v2.1-dev3~96
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=8ed5b965872e3b0cd6605f37bc8fe9f2819ce03c;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: free the sni_keytype nodes

This patch frees the sni_keytype nodes once the sni_ctxs have been
allocated in ssl_sock_load_multi_ckchn();

Could be backported in every version using the multi-cert SSL bundles.
---

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index b9ca662462..a957d3e9cd 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -3361,6 +3361,7 @@ end:
 	while (node) {
 		next = ebmb_next(node);
 		ebmb_delete(node);
+		free(ebmb_entry(node, struct sni_keytype, name));
 		node = next;
 	}