From: Tobias Brunner <tobias@strongswan.org>
Date: Sat, 20 May 2017 11:04:56 +0000 (+0200)
Subject: x509: Fix leak when parsing CDPs if an invalid one follows valid ones
X-Git-Tag: 5.5.3~26^2~3
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9c42126297a4d8db1b6800cdbe7be26c3a63a984;p=thirdparty%2Fstrongswan.git

x509: Fix leak when parsing CDPs if an invalid one follows valid ones
---

diff --git a/src/libstrongswan/plugins/x509/x509_cert.c b/src/libstrongswan/plugins/x509/x509_cert.c
index 19ba1f8639..ee630eee00 100644
--- a/src/libstrongswan/plugins/x509/x509_cert.c
+++ b/src/libstrongswan/plugins/x509/x509_cert.c
@@ -923,8 +923,8 @@ bool x509_parse_crlDistributionPoints(chunk_t blob, int level0,
 
 end:
 	parser->destroy(parser);
-	uris->destroy(uris);
-	issuers->destroy(issuers);
+	uris->destroy_offset(uris, offsetof(identification_t, destroy));
+	issuers->destroy_offset(issuers, offsetof(identification_t, destroy));
 
 	return success;
 }