NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit27dbe1a

committed

Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate matchwith the hostname connected to leaked memory after each lookup done.This is broken sinceacd08d7 that added support for SANs in SSLcertificates, so backpatch down to 9.5.Author: Roman PeshkurovReviewed-by: Hamid Akhtar, Michael Paquier, David SteeleDiscussion:https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.comBackpatch-through: 9.5

1 parent8803506 commit27dbe1aCopy full SHA for 27dbe1a

File tree

1 file changed

-1

lines changed

src/interfaces/libpq
- fe-secure-openssl.c

1 file changed

-1

lines changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -552,7 +552,7 @@ pgtls_verify_peer_name_matches_certificate_guts(PGconn *conn,`
`552`	`552`	`if (rc!=0)`
`553`	`553`	`break;`
`554`	`554`	`}`
`555`		`-sk_GENERAL_NAME_free(peer_san);`
	`555`	`+sk_GENERAL_NAME_pop_free(peer_san,GENERAL_NAME_free);`
`556`	`556`	`}`
`557`	`557`
`558`	`558`	`/*`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit27dbe1a

File tree

1 file changed

1 file changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

0 commit comments