From: William Lallemand <wlallemand@irq6.net>
Date: Sat, 21 Feb 2026 15:03:17 +0000 (+0100)
Subject: BUG/MINOR: acme: acme_ctx_destroy() leaks auth->dns
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e63722fed48ae91ce577f2dc8196a37ae9aea6ba;p=thirdparty%2Fhaproxy.git

BUG/MINOR: acme: acme_ctx_destroy() leaks auth->dns

365a696 ("MINOR: acme: emit a log for DNS-01 challenge response")
introduces the auth->dns member which is istdup(). But this member is
never free, instead auth->token was freed twice by mistake.

Must be backported to 3.2.
---

diff --git a/src/acme.c b/src/acme.c
index 28cdd076c..437e61068 100644
--- a/src/acme.c
+++ b/src/acme.c
@@ -878,7 +878,7 @@ static void acme_ctx_destroy(struct acme_ctx *ctx)
 		istfree(&auth->auth);
 		istfree(&auth->chall);
 		istfree(&auth->token);
-		istfree(&auth->token);
+		istfree(&auth->dns);
 		next = auth->next;
 		free(auth);
 		auth = next;