]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f9cc8a3) | patch
BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in ssl_sock_free_srv_ctx()
authorWilliam Lallemand <wlallemand@irq6.net>
Sun, 27 Sep 2026 15:18:08 +0000 (15:18 +0000)
committerWilliam Lallemand <wlallemand@irq6.net>
Sun, 27 Sep 2026 15:44:51 +0000 (17:44 +0200)
commit250e6ff1577c8a7329ee0d274d44bfffe179ab58
tree79df6dcd89bde657d294fdb367b3efd6efbc350ctree | snapshot
parentf9cc8a3fea6484ee375d36782ad7b5a391f3d408commit | diff
BUG/MINOR: ssl: free curves, sigalgs and client_sigalgs in ssl_sock_free_srv_ctx()

The ssl-default-server-* keywords (curves, sigalgs, client_sigalgs)
allocate memory via strdup() that was never freed when servers are
destroyed. This causes a memory leak per server instance.

Add ha_free() calls guarded by the same OpenSSL API version checks
matching the allocation guards in cfgparse-ssl.c.

This change should be backported to all supported branches.
src/ssl_sock.c diff | blob | history
haproxy upstream