]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MINOR: ssl: fix a trash buffer leak in some error cases
authorWilliam Lallemand <wlallemand@haproxy.com>
Mon, 8 Jun 2020 07:40:37 +0000 (09:40 +0200)
committerWilliam Lallemand <wlallemand@haproxy.org>
Mon, 8 Jun 2020 07:51:14 +0000 (09:51 +0200)
commite5ff4addb2300db60f5a4d1f99abd54b4a1a94f6
treefb49d957261c8a879bf4df153aa2552a42bebcba
parent0041741ef7253fcad2fc98f0b2a9968fb4af3574
BUG/MINOR: ssl: fix a trash buffer leak in some error cases

Fix a trash buffer leak when we can't take the lock of the ckch, or when
"set ssl cert" is wrongly used.

The bug was mentionned in this thread:
https://www.mail-archive.com/haproxy@formilux.org/msg37539.html

The bug was introduced by commit bc6ca7c ("MINOR: ssl/cli: rework 'set
ssl cert' as 'set/commit'").

Must be backported in 2.1.
src/ssl_ckch.c