In 3.4-dev6, commit
de5fc2f515 ("BUG/MINOR: server: set auto SNI for
dynamic servers") allowed to properly set the SNI, and return an error
message. However the error message is leaked after being printed on the
CLI.
This should be backported to 3.3.
!srv->sni_expr && !(srv->ssl_ctx.options & SRV_SSL_O_NO_AUTO_SNI)) {
if (srv_configure_auto_sni(srv, &errcode, &errmsg)) {
ha_alert("%s.\n", errmsg);
+ ha_free(&errmsg);
goto out;
}
}