]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f73a173) | patch
BUG/MINOR: jws: fix ECDSA_SIG leak in jws_b64_signature()
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Tue, 20 Oct 2026 08:04:46 +0000 (10:04 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 21 Oct 2026 15:43:19 +0000 (17:43 +0200)
commitf563e836297c05f63698aa54d5a9154d0abf6b2a
tree5644d87fb8ed97f87499541ad5c6534fca5ff673tree | snapshot
parentf73a173105e4339b326604b8b4bcaaae5c4e0eeccommit | diff
BUG/MINOR: jws: fix ECDSA_SIG leak in jws_b64_signature()

In 'jws_b64_signature' we call 'd2i_ECDSA_SIG' which creates an
ECDSA_SIG object that was never freed.

This was introduced in 3.2 by commit 3abb428fc ("MINOR: jws: implement
JWS signing"), so the fix must be backported to 3.2.
src/jws.c diff | blob | history
haproxy upstream