NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit1bb0293

committed

Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate matchwith the hostname connected to leaked memory after each lookup done.This is broken sinceacd08d7 that added support for SANs in SSLcertificates, so backpatch down to 9.5.Author: Roman PeshkurovReviewed-by: Hamid Akhtar, Michael Paquier, David SteeleDiscussion:https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.comBackpatch-through: 9.5

1 parente6c17c8 commit1bb0293Copy full SHA for 1bb0293

File tree

1 file changed

-1

lines changed

src/interfaces/libpq
- fe-secure-openssl.c

1 file changed

-1

lines changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -627,7 +627,7 @@ verify_peer_name_matches_certificate(PGconn *conn)`
`627`	`627`	`if (found_match\|\|got_error)`
`628`	`628`	`break;`
`629`	`629`	`}`
`630`		`-sk_GENERAL_NAME_free(peer_san);`
	`630`	`+sk_GENERAL_NAME_pop_free(peer_san,GENERAL_NAME_free);`
`631`	`631`	`}`
`632`	`632`
`633`	`633`	`/*`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit1bb0293

File tree

1 file changed

1 file changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

0 commit comments