db/pgbackrest
1
0
Fork 0
mirror of https://github.com/pgbackrest/pgbackrest.git synced 2025-03-05 15:05:48 +02:00
Code Issues Releases Activity

Fix minor leak in TLS host verification.

Browse Source 
sk_GENERAL_NAME_free() only freed the name stack, not the names in the stack. sk_GENERAL_NAME_pop_free() frees both.

Due to aggressive connection reuse this leak was unlikely to be very noticeable.
This commit is contained in:
Roman Peshkurov 2020-04-21 17:20:42 -04:00 committed by David Steele
parent 6d11fe53f7
commit 1eb2678938
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/common/io/tls/client.c
View File

@ -232,7 +232,7 @@ tlsClientHostVerify(const String *host, X509 *certificate)
break;
}
sk_GENERAL_NAME_free(altNameStack);
sk_GENERAL_NAME_pop_free(altNameStack, GENERAL_NAME_free);
}
// If no subject alternative name was found then check the common name. Per RFC 2818 and RFC 6125, if the subjectAltName