]> git.ipfire.org Git - thirdparty/postgresql.git/commit
Fix memory leak in libpq when using sslmode=verify-full
authorMichael Paquier <michael@paquier.xyz>
Tue, 21 Apr 2020 22:28:04 +0000 (07:28 +0900)
committerMichael Paquier <michael@paquier.xyz>
Tue, 21 Apr 2020 22:28:04 +0000 (07:28 +0900)
commite5e295d5008be7aabe47f803d808aae260ec9ba6
tree47bccf5a4dc1bf7b1ca47467ee6106f8621aa49a
parent36714f8ca32a0c84d8bafc03278fe0f48b304d9c
Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate match
with the hostname connected to leaked memory after each lookup done.

This is broken since acd08d7 that added support for SANs in SSL
certificates, so backpatch down to 9.5.

Author: Roman Peshkurov
Reviewed-by: Hamid Akhtar, Michael Paquier, David Steele
Discussion: https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.com
Backpatch-through: 9.5
src/interfaces/libpq/fe-secure-openssl.c