Corrected memory leak in privkey deinitialization. Reported by Dan Winship.

diff --git a/NEWS b/NEWS
index 0fd87e30d61ad5fc271c28c2e6a663ba4e369ab1..4a0e9023b9444a7bf6f60718aa2e89013cdf17d9 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -5,6 +5,9 @@ See the end for copying conditions.
 
 Version 2.12.11 (unreleased)
 
+** libgnutls: Memory leak fixes in credentials private key 
+deinitialization. Reported by Dan Winship.
+
 ** libgnutls: Allow CA importing of 0 certificates to succeed.
 Reported by Jonathan Nieder <jrnieder@gmail.com> in
 <http://bugs.debian.org/640639>.

diff --git a/lib/auth_cert.c b/lib/auth_cert.c
index 66aaf0bfc96225cae115bc4863c71a93d76bdaf1..7c36ea402488e9a444cc7081528faa2493ca59a5 100644 (file)
--- a/lib/auth_cert.c
+++ b/lib/auth_cert.c
@@ -615,6 +615,7 @@ cleanup:
             {
               gnutls_x509_crt_deinit (st2.cert.x509[i]);
             }
+          gnutls_free(st2.cert.x509);
         }
     }
   else
@@ -2025,6 +2026,7 @@ _gnutls_selected_certs_deinit (gnutls_session_t session)
       session->internals.selected_cert_list = NULL;
       session->internals.selected_cert_list_length = 0;
 
+      gnutls_privkey_deinit(session->internals.selected_key);
       session->internals.selected_key = NULL;
     }