1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
|
From 9d567481dad33c4044baa4e659862ee096d014ae Mon Sep 17 00:00:00 2001
From: Jiasheng Jiang <jian1000@purdue.edu>
Date: Sat, 5 Jul 2025 00:55:17 +0000
Subject: [PATCH] lib/x509/x509_ext.c: Add gnutls_free() to avoid memory leak
Add gnutls_free() to free ooc if subject_alt_names_set() fails to avoid memory leak.
Fixes: 2bd323f72 ("Added new API to handle X.509 extensions.")
Signed-off-by: JiashengJiang <jiasheng@purdue.edu>
---
lib/x509/x509_ext.c | 3 +++
1 file changed, 3 insertions(+)
diff --git a/lib/x509/x509_ext.c b/lib/x509/x509_ext.c
index 1714578de6..0301a594c2 100644
--- a/lib/x509/x509_ext.c
+++ b/lib/x509/x509_ext.c
@@ -184,14 +184,15 @@ int gnutls_subject_alt_names_set(gnutls_subject_alt_names_t sans,
if (othername_oid != NULL)
ooc = gnutls_strdup(othername_oid);
else
ooc = NULL;
ret = subject_alt_names_set(&sans->names, &sans->size, san_type, ©,
ooc, 0);
if (ret < 0) {
+ gnutls_free(ooc);
gnutls_free(copy.data);
return gnutls_assert_val(ret);
}
return 0;
}
@@ -792,14 +793,16 @@ int gnutls_x509_aki_set_cert_issuer(gnutls_x509_aki_t aki,
t_othername_oid.size = strlen(othername_oid);
}
ret = subject_alt_names_set(&aki->cert_issuer.names,
&aki->cert_issuer.size, san_type, &t_san,
(char *)t_othername_oid.data, 0);
if (ret < 0) {
+ gnutls_free(t_othername_oid.data);
+ gnutls_free(t_san.data);
gnutls_assert();
return ret;
}
return 0;
}
--
2.47.2
|
