From 32afc0b03b3b4e8d5e68f0f727c56ba151ba864f Mon Sep 17 00:00:00 2001 From: tb <> Date: Fri, 9 Nov 2018 04:35:09 +0000 Subject: Avoid leak: free existing SRTP connection profiles before setting it. From Ben L . --- src/lib/libssl/d1_srtp.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/lib/libssl/d1_srtp.c b/src/lib/libssl/d1_srtp.c index eb1877a12c..4b1b24a3c1 100644 --- a/src/lib/libssl/d1_srtp.c +++ b/src/lib/libssl/d1_srtp.c @@ -1,4 +1,4 @@ -/* $OpenBSD: d1_srtp.c,v 1.22 2017/08/27 02:58:04 doug Exp $ */ +/* $OpenBSD: d1_srtp.c,v 1.23 2018/11/09 04:35:09 tb Exp $ */ /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) * All rights reserved. * @@ -207,6 +207,7 @@ ssl_ctx_make_profiles(const char *profiles_string, ptr = col + 1; } while (col); + sk_SRTP_PROTECTION_PROFILE_free(*out); *out = profiles; return 0; -- cgit v1.2.3-55-g6feb