From: William Lallemand <wlallemand@haproxy.com>
Date: Mon, 16 Feb 2026 14:56:21 +0000 (+0100)
Subject: BUG/MINOR: ssl: fix leak in ssl-f-use parser upon error
X-Git-Tag: v3.4-dev5~69
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e0d1cdff6a277ba52f32b8ef119908a32efbfe6c;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: fix leak in ssl-f-use parser upon error

cfg_crt_node->filename is leaked on the error path in the ssl-f-use
configuration parser.

Could be backported as far as 3.2
---

diff --git a/src/cfgparse-ssl.c b/src/cfgparse-ssl.c
index a81f3efe1..967b0519f 100644
--- a/src/cfgparse-ssl.c
+++ b/src/cfgparse-ssl.c
@@ -2598,6 +2598,7 @@ error:
 	free(err);
 
 	list_for_each_entry_safe(n, r, &cur_crtlist, list) {
+		ha_free(&n->filename);
 		ckch_conf_clean(n->ckch_conf);
 		ha_free(&n->ckch_conf);
 		ssl_sock_free_ssl_conf(n->ssl_conf);