x509: Fix leak when parsing CDPs if an invalid one follows valid ones

diff --git a/src/libstrongswan/plugins/x509/x509_cert.c b/src/libstrongswan/plugins/x509/x509_cert.c
index 19ba1f8639a4402e6c4a2103f2b06b860a7bc8fb..ee630eee007d01a47ddfe887b2ccbe5dec3d8aa8 100644 (file)
--- a/src/libstrongswan/plugins/x509/x509_cert.c
+++ b/src/libstrongswan/plugins/x509/x509_cert.c
@@ -923,8 +923,8 @@ bool x509_parse_crlDistributionPoints(chunk_t blob, int level0,
 
 end:
        parser->destroy(parser);
-       uris->destroy(uris);
-       issuers->destroy(issuers);
+       uris->destroy_offset(uris, offsetof(identification_t, destroy));
+       issuers->destroy_offset(issuers, offsetof(identification_t, destroy));
 
        return success;
 }