romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-04-14 22:01:41 +03:00
Code Issues Projects Releases Packages Wiki Activity

openssl: fix memory leaks in ECH code (OpenSSL 3)

Browse source 
Also drop an unnecessary cast.

Found by Codex Security

Follow-up to a362962b72 #11922

Closes #20993
This commit is contained in:
Viktor Szakats 2026-03-19 00:37:14 +01:00
parent fc222ec11f
commit 6c0772fd7f
No known key found for this signature in database
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
lib/vtls/openssl.c
View file

@ -4136,7 +4136,9 @@ static void ossl_trace_ech_retry_configs(struct Curl_easy *data, SSL *ssl,
else
infof(data, "ECH: no retry_configs (rv = %d)", rv);
#ifndef HAVE_BORINGSSL_LIKE
OPENSSL_free((void *)rcs);
OPENSSL_free(inner);
OPENSSL_free(rcs);
OPENSSL_free(outer);
#endif
return;
}