diff options
author | tb <> | 2023-08-30 00:49:32 +0000 |
---|---|---|
committer | tb <> | 2023-08-30 00:49:32 +0000 |
commit | a4768fca91b9eaa7e7367f0ccf398b87f09e1fb8 (patch) | |
tree | cf2270b763fddcceabb1039a124d6f8f26d81b4d /src/lib/libcrypto/objects/obj_dat.c | |
parent | 09dcbefdff671a2602d306db8c2ca196ca43a8d7 (diff) | |
download | openbsd-a4768fca91b9eaa7e7367f0ccf398b87f09e1fb8.tar.gz openbsd-a4768fca91b9eaa7e7367f0ccf398b87f09e1fb8.tar.bz2 openbsd-a4768fca91b9eaa7e7367f0ccf398b87f09e1fb8.zip |
Fix leaks in copy_issuer()
The stack of subject alternative names from the issuer is parsed using
X509V3_EXT_d2i(), so it must be freed with sk_GENERAL_NAME_pop_free().
It's not worth doing complicated ownership handling when the individual
alternative names can be copied with GENERAL_NAME_dup().
Previously, ialt and its remaining members would be leaked when the call
to sk_GENERAL_NAME_push() failed halfway through.
This is only reachable via the issuer:copy x509v3.cnf(5) directive.
ok jsing
Diffstat (limited to 'src/lib/libcrypto/objects/obj_dat.c')
0 files changed, 0 insertions, 0 deletions