NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commite1c0872

committed

Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate matchwith the hostname connected to leaked memory after each lookup done.This is broken sinceacd08d7 that added support for SANs in SSLcertificates, so backpatch down to 9.5.Author: Roman PeshkurovReviewed-by: Hamid Akhtar, Michael Paquier, David SteeleDiscussion:https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.comBackpatch-through: 9.5

1 parentcda0240 commite1c0872Copy full SHA for e1c0872

File tree

1 file changed

-1

lines changed

src/interfaces/libpq
- fe-secure-openssl.c

1 file changed

-1

lines changed

`‎src/interfaces/libpq/fe-secure-openssl.c‎`

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -550,7 +550,7 @@ pgtls_verify_peer_name_matches_certificate_guts(PGconn *conn,`
`550`	`550`	`if (rc!=0)`
`551`	`551`	`break;`
`552`	`552`	`}`
`553`		`-sk_GENERAL_NAME_free(peer_san);`
	`553`	`+sk_GENERAL_NAME_pop_free(peer_san,GENERAL_NAME_free);`
`554`	`554`	`}`
`555`	`555`
`556`	`556`	`/*`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commite1c0872

File tree

1 file changed

1 file changed

`‎src/interfaces/libpq/fe-secure-openssl.c‎`

0 commit comments