From: Daiki Ueno <ueno@gnu.org>
Date: Thu, 6 Jul 2023 12:30:52 +0000 (+0200)
Subject: ocsptool: fix memleak spotted by ASan
X-Git-Tag: 3.8.1~8^2~9
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=0fc6cc7087aaec031840c1ecc03c43d331c0df3d;p=thirdparty%2Fgnutls.git

ocsptool: fix memleak spotted by ASan

Signed-off-by: Daiki Ueno <ueno@gnu.org>
---

diff --git a/src/ocsptool.c b/src/ocsptool.c
index 5ad24a6395..e17096ca74 100644
--- a/src/ocsptool.c
+++ b/src/ocsptool.c
@@ -292,7 +292,7 @@ static int _verify_response(gnutls_datum_t *data, gnutls_datum_t *nonce,
 	gnutls_x509_trust_list_t list;
 	unsigned int x509_ncas = 0;
 	unsigned verify;
-	gnutls_datum_t dat;
+	gnutls_datum_t dat = { NULL, 0 };
 
 	ret = gnutls_ocsp_resp_init(&resp);
 	if (ret < 0) {
@@ -365,6 +365,7 @@ static int _verify_response(gnutls_datum_t *data, gnutls_datum_t *nonce,
 				gnutls_strerror(ret));
 			app_exit(1);
 		}
+		gnutls_free(dat.data);
 
 		if (HAVE_OPT(VERBOSE)) {
 			unsigned int i;
@@ -405,6 +406,8 @@ static int _verify_response(gnutls_datum_t *data, gnutls_datum_t *nonce,
 				gnutls_strerror(ret));
 			app_exit(1);
 		}
+		gnutls_x509_trust_list_deinit(list, 1);
+		gnutls_free(x509_ca_list);
 	} else if (signer) {
 		if (HAVE_OPT(VERBOSE)) {
 			gnutls_datum_t out;