From: Ondřej Kuzník <ondra@mistotebe.net>
Date: Tue, 24 Mar 2026 15:16:16 +0000 (+0000)
Subject: ITS#10471 Fix config related leaks in lloadd
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=0d71edd0f6248aa0cf7388770ec1da02fb22152c;p=thirdparty%2Fopenldap.git

ITS#10471 Fix config related leaks in lloadd
---

diff --git a/servers/lloadd/config.c b/servers/lloadd/config.c
index 9ff54982e6..d13eab7083 100644
--- a/servers/lloadd/config.c
+++ b/servers/lloadd/config.c
@@ -3816,6 +3816,7 @@ backend_cf_gen( ConfigArgs *c )
             if ( BER_BVISNULL( &tlskey[i].word ) ) {
                 snprintf( c->cr_msg, sizeof(c->cr_msg),
                         "invalid starttls configuration" );
+                ch_free( c->value_bv.bv_val );
                 goto fail;
             }
 #ifndef HAVE_TLS
@@ -3828,6 +3829,7 @@ backend_cf_gen( ConfigArgs *c )
                 snprintf( c->cr_msg, sizeof(c->cr_msg),
                         "invalid starttls configuration when compiled without "
                         "TLS support" );
+                ch_free( c->value_bv.bv_val );
                 goto fail;
             }
 #endif /* ! HAVE_TLS */
@@ -3836,6 +3838,7 @@ backend_cf_gen( ConfigArgs *c )
                 b->b_tls = b->b_tls_conf;
                 flag = LLOAD_BACKEND_MOD_OTHER;
             }
+            ch_free( c->value_bv.bv_val );
         } break;
         case CFG_WEIGHT:
             b->b_weight = c->value_uint;