]> git.ipfire.org Git - thirdparty/openldap.git/commitdiff
ITS#10471 Fix config related leaks in lloadd
authorOndřej Kuzník <ondra@mistotebe.net>
Tue, 24 Mar 2026 15:16:16 +0000 (15:16 +0000)
committerQuanah Gibson-Mount <quanah@openldap.org>
Fri, 10 Apr 2026 03:15:42 +0000 (03:15 +0000)
servers/lloadd/config.c

index 9ff54982e6c0579761fa7760f4d9dfdb80397180..d13eab7083d3bb643d270454ae86e8707865cd3d 100644 (file)
@@ -3816,6 +3816,7 @@ backend_cf_gen( ConfigArgs *c )
             if ( BER_BVISNULL( &tlskey[i].word ) ) {
                 snprintf( c->cr_msg, sizeof(c->cr_msg),
                         "invalid starttls configuration" );
+                ch_free( c->value_bv.bv_val );
                 goto fail;
             }
 #ifndef HAVE_TLS
@@ -3828,6 +3829,7 @@ backend_cf_gen( ConfigArgs *c )
                 snprintf( c->cr_msg, sizeof(c->cr_msg),
                         "invalid starttls configuration when compiled without "
                         "TLS support" );
+                ch_free( c->value_bv.bv_val );
                 goto fail;
             }
 #endif /* ! HAVE_TLS */
@@ -3836,6 +3838,7 @@ backend_cf_gen( ConfigArgs *c )
                 b->b_tls = b->b_tls_conf;
                 flag = LLOAD_BACKEND_MOD_OTHER;
             }
+            ch_free( c->value_bv.bv_val );
         } break;
         case CFG_WEIGHT:
             b->b_weight = c->value_uint;