diff options
author | tb <> | 2023-08-30 00:49:32 +0000 |
---|---|---|
committer | tb <> | 2023-08-30 00:49:32 +0000 |
commit | 6374d451ab78e6a8b8173aa5795b5e7f4c9c1081 (patch) | |
tree | cf2270b763fddcceabb1039a124d6f8f26d81b4d /src/lib/libcrypto/man/RAND_bytes.3 | |
parent | 4f19586576da87be433f16dc44538c814b842b85 (diff) | |
download | openbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.tar.gz openbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.tar.bz2 openbsd-6374d451ab78e6a8b8173aa5795b5e7f4c9c1081.zip |
Fix leaks in copy_issuer()
The stack of subject alternative names from the issuer is parsed using
X509V3_EXT_d2i(), so it must be freed with sk_GENERAL_NAME_pop_free().
It's not worth doing complicated ownership handling when the individual
alternative names can be copied with GENERAL_NAME_dup().
Previously, ialt and its remaining members would be leaked when the call
to sk_GENERAL_NAME_push() failed halfway through.
This is only reachable via the issuer:copy x509v3.cnf(5) directive.
ok jsing
Diffstat (limited to 'src/lib/libcrypto/man/RAND_bytes.3')
0 files changed, 0 insertions, 0 deletions