NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commit35d0865

committed

Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate matchwith the hostname connected to leaked memory after each lookup done.This is broken sinceacd08d7 that added support for SANs in SSLcertificates, so backpatch down to 9.5.Author: Roman PeshkurovReviewed-by: Hamid Akhtar, Michael Paquier, David SteeleDiscussion:https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.comBackpatch-through: 9.5

1 parent97dcd5c commit35d0865Copy full SHA for 35d0865

File tree

1 file changed

-1

lines changed

src/interfaces/libpq
- fe-secure-openssl.c

1 file changed

-1

lines changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -550,7 +550,7 @@ pgtls_verify_peer_name_matches_certificate_guts(PGconn *conn,`
`550`	`550`	`if (rc!=0)`
`551`	`551`	`break;`
`552`	`552`	`}`
`553`		`-sk_GENERAL_NAME_free(peer_san);`
	`553`	`+sk_GENERAL_NAME_pop_free(peer_san,GENERAL_NAME_free);`
`554`	`554`	`}`
`555`	`555`
`556`	`556`	`/*`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commit35d0865

File tree

1 file changed

1 file changed

`‎src/interfaces/libpq/fe-secure-openssl.c`

0 commit comments