]> git.ipfire.org Git - thirdparty/squid.git/commit
Fixed segmentation fault when freeing https_port clientca on reconfigure
authorAlex Rousskov <rousskov@measurement-factory.com>
Fri, 19 Jun 2015 16:57:30 +0000 (10:57 -0600)
committerAlex Rousskov <rousskov@measurement-factory.com>
Fri, 19 Jun 2015 16:57:30 +0000 (10:57 -0600)
commite0f4e4e0d55779a5ca9ce6956f072bf51ffbca88
tree142604249f963aa868b7521243a57d52c2dcc8af
parent7766dad3ee58d2c0a17e335d3f8e826906a1d548
Fixed segmentation fault when freeing https_port clientca on reconfigure
or exit.

AnyP::PortCfg::clientCA list was double-freed because the SSL context takes
ownership of the STACK_OF(X509_NAME) supplied via SSL_CTX_set_client_CA_list(),
but Squid was not aware of that. Squid now supplies a clone of clientCA.
src/ssl/support.cc