From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Thu, 3 Nov 2022 14:16:49 +0000 (+0100)
Subject: BUG/MINOR: ssl: ocsp structure not freed properly in case of error
X-Git-Tag: v2.7-dev9~118
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=aa529f776d24ecc84239a97456ed4835b6589350;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: ocsp structure not freed properly in case of error

In case of error, the ocsp item might already be in the ocsp certificate
tree but simply freed instead of destroyed through ssl_sock_free_ocsp.

This patch can be backported to all stable versions.
---

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 801405b309..5560205535 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -1594,7 +1594,7 @@ out:
 		OCSP_CERTID_free(cid);
 
 	if (ocsp)
-		free(ocsp);
+		ssl_sock_free_ocsp(ocsp);
 
 	if (warn)
 		free(warn);