Avoid leak: free existing SRTP connection profiles before

setting it.

From Ben L <bobsayshilol () live ! co ! uk>.

1 files changed, 2 insertions, 1 deletions

diff --git a/src/lib/libssl/d1_srtp.c b/src/lib/libssl/d1_srtp.c
index eb1877a12c..4b1b24a3c1 100644
--- a/src/lib/libssl/d1_srtp.c
+++ b/src/lib/libssl/d1_srtp.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: d1_srtp.c,v 1.22 2017/08/27 02:58:04 doug Exp $ */
+/* $OpenBSD: d1_srtp.c,v 1.23 2018/11/09 04:35:09 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -207,6 +207,7 @@ ssl_ctx_make_profiles(const char *profiles_string,
                         ptr = col + 1;
         } while (col);
 
+        sk_SRTP_PROTECTION_PROFILE_free(*out);
         *out = profiles;
 
         return 0;