From: William Lallemand <wlallemand@haproxy.com>
Date: Thu, 9 Oct 2025 12:57:37 +0000 (+0200)
Subject: BUG/MINOR: ssl: leak in ssl-f-use
X-Git-Tag: v3.3-dev10~36
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d9365a88a5afb4bb10c9119dec6b1b5c616d847b;p=thirdparty%2Fhaproxy.git

BUG/MINOR: ssl: leak in ssl-f-use

Fix the leak of the filename in the struct cfg_crt_node which is a
temporary structure used for ssl-f-use initialization.

Must be backported to 3.2.
---

diff --git a/src/cfgparse-ssl.c b/src/cfgparse-ssl.c
index d135addcb..1d53da59f 100644
--- a/src/cfgparse-ssl.c
+++ b/src/cfgparse-ssl.c
@@ -2405,6 +2405,7 @@ error:
 	ha_free(&ckch_conf);
 	ssl_sock_free_ssl_conf(ssl_conf);
 	ha_free(&ssl_conf);
+	ha_free(&cfg_crt_node->filename);
 	ha_free(&cfg_crt_node);
 	return -1;
 }
@@ -2460,6 +2461,7 @@ static int post_section_frontend_crt_init()
 		LIST_DELETE(&n->list);
 		/* n->ssl_conf is reused so we don't free them here */
 		free(n->ckch_conf);
+		free(n->filename);
 		free(n);
 	}