database/postgres
database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-05-05 09:19:17 +03:00
Code

Fix memory leak in libpq when using sslmode=verify-full

Browse Source 
Checking if Subject Alternative Names (SANs) from a certificate match
with the hostname connected to leaked memory after each lookup done.

This is broken since acd08d7 that added support for SANs in SSL
certificates, so backpatch down to 9.5.

Author: Roman Peshkurov
Reviewed-by: Hamid Akhtar, Michael Paquier, David Steele
Discussion: https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.com
Backpatch-through: 9.5
This commit is contained in:
Michael Paquier 2020-04-22 07:28:00 +09:00
parent 5c1c27eef9
commit c9c15790d5
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
src/interfaces/libpq/fe-secure-openssl.c
View File

@ -620,7 +620,7 @@ verify_peer_name_matches_certificate(PGconn *conn)
if (found_match || got_error)
break;
}
sk_GENERAL_NAME_free(peer_san);
sk_GENERAL_NAME_pop_free(peer_san, GENERAL_NAME_free);
}
/*