]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ad4cbb6) | patch
BUG/MINOR: ssl: Fix leak of X509_NAME in traces
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Mon, 17 Aug 2026 16:05:52 +0000 (18:05 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 17 Aug 2026 17:10:12 +0000 (19:10 +0200)
commit6306b2b38459f3dcec30dcd6880ff024a226677b
treec634f65b5eaaab219ca8ec11dc1a72f0fa0d4b5atree | snapshot
parentad4cbb634d0438d16996ad4454d627c75b918faecommit | diff
BUG/MINOR: ssl: Fix leak of X509_NAME in traces

When X509_NAME_oneline() is called without a buffer, it allocates one
which was never free'd in the SSL traces' code. Rather than free it, we
might as well use a trash to avoid an allocation.

This was introduced in 3.2 by commit 4a8fa28e3 ("MINOR: ssl: Add traces
around SSL_do_handshake call"). It must be backported to 3.2.

Reported-by: Claude (ANT-2026-4P18WC9H)
src/ssl_trace.c diff | blob | history
haproxy upstream