database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-06-29 10:41:53 +03:00
Code Activity

Fix memory leak in libpq when using sslmode=verify-full

Browse Source 
Checking if Subject Alternative Names (SANs) from a certificate match
with the hostname connected to leaked memory after each lookup done.

This is broken since acd08d7 that added support for SANs in SSL
certificates, so backpatch down to 9.5.

Author: Roman Peshkurov
Reviewed-by: Hamid Akhtar, Michael Paquier, David Steele
Discussion: https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.com
Backpatch-through: 9.5
This commit is contained in:
Michael Paquier
2020-04-22 07:27:53 +09:00
parent e6c17c85ac
commit 1bb0293d84
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
src/interfaces/libpq/fe-secure-openssl.c
View File

@ -627,7 +627,7 @@ verify_peer_name_matches_certificate(PGconn *conn)
if (found_match || got_error)
break;
}
sk_GENERAL_NAME_free(peer_san);
sk_GENERAL_NAME_pop_free(peer_san, GENERAL_NAME_free);
}
/*