From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Fri, 10 Oct 2025 15:05:22 +0000 (+0200)
Subject: BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit
X-Git-Tag: v3.3-dev10~31
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b706f2d092b02e8e37662d407d3a2a4914872988;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit

The key_base field of the global_ssl structure is an strdup'ed field
(when set) which was never free'd during deinit.

This patch can be backported up to branch 3.0.
---

diff --git a/src/ssl_sock.c b/src/ssl_sock.c
index 8cd9604aa..13339fa1b 100644
--- a/src/ssl_sock.c
+++ b/src/ssl_sock.c
@@ -7965,6 +7965,7 @@ static void ssl_sock_clt_sni_free_func(void *parent, void *ptr, CRYPTO_EX_DATA *
 static void ssl_free_global(void)
 {
 	ha_free(&global_ssl.crt_base);
+	ha_free(&global_ssl.key_base);
 	ha_free(&global_ssl.ca_base);
 
 	ha_free(&global_ssl.issuers_chain_path);