Since commit
90b098c ("BUG/MINOR: cli: don't call the kw->io_release if
kw->parse failed"), the io_release() callback is not called anymore when
the parse() failed. Call it directly on the error path of the
cli_parse_set_cert() function.
if (errcode & ERR_CODE) {
/* we release the spinlock and free the unused structures in the release function */
+ cli_release_set_cert(appctx);
return cli_dynerr(appctx, memprintf(&err, "%sCan't update %s!\n", err ? err : "", args[3]));
} else
return 0;