From b61176b9f7e8c8649e14cbb8532de6e3cf560f63 Mon Sep 17 00:00:00 2001 From: Sergey Kandaurov Date: Wed, 7 Apr 2021 15:14:41 +0300 Subject: [PATCH] QUIC: fixed memory leak in ngx_hkdf_extract()/ngx_hkdf_expand(). This fixes leak on successful path when built with OpenSSL. --- src/event/quic/ngx_event_quic_protection.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/src/event/quic/ngx_event_quic_protection.c b/src/event/quic/ngx_event_quic_protection.c index efc15a22b..12dd233b8 100644 --- a/src/event/quic/ngx_event_quic_protection.c +++ b/src/event/quic/ngx_event_quic_protection.c @@ -348,6 +348,8 @@ ngx_hkdf_expand(u_char *out_key, size_t out_len, const EVP_MD *digest, goto failed; } + EVP_PKEY_CTX_free(pctx); + return NGX_OK; failed: @@ -409,6 +411,8 @@ ngx_hkdf_extract(u_char *out_key, size_t *out_len, const EVP_MD *digest, goto failed; } + EVP_PKEY_CTX_free(pctx); + return NGX_OK; failed: -- 2.47.3