summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/man/CONF_modules_load_file.3
diff options
context:
space:
mode:
authortb <>2023-08-30 00:49:32 +0000
committertb <>2023-08-30 00:49:32 +0000
commit6374d451ab78e6a8b8173aa5795b5e7f4c9c1081 (patch)
treecf2270b763fddcceabb1039a124d6f8f26d81b4d /src/lib/libcrypto/man/CONF_modules_load_file.3
parent4f19586576da87be433f16dc44538c814b842b85 (diff)
downloadopenbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.tar.gz
openbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.tar.bz2
openbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.zip
Fix leaks in copy_issuer()
The stack of subject alternative names from the issuer is parsed using X509V3_EXT_d2i(), so it must be freed with sk_GENERAL_NAME_pop_free(). It's not worth doing complicated ownership handling when the individual alternative names can be copied with GENERAL_NAME_dup(). Previously, ialt and its remaining members would be leaked when the call to sk_GENERAL_NAME_push() failed halfway through. This is only reachable via the issuer:copy x509v3.cnf(5) directive. ok jsing
Diffstat (limited to 'src/lib/libcrypto/man/CONF_modules_load_file.3')
0 files changed, 0 insertions, 0 deletions