romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-25 12:27:16 +03:00
Code Issues Projects Releases Packages Wiki Activity

Hzhijun reported a memory leak in the SSL certificate code, that leaked the

Browse source 
remote certificate name when it didn't match the used host name.
This commit is contained in:
Daniel Stenberg 2005-01-10 09:48:39 +00:00
parent 894ec46ef4
commit 83bab78bda
3 changed files with 12 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

9
lib/ssluse.c
View file

@ -1003,6 +1003,7 @@ static CURLcode verifyhost(struct connectdata *conn,
#else
struct in_addr addr;
#endif
CURLcode res = CURLE_OK;
#ifdef ENABLE_IPV6
if(conn->bits.ipv6_ip &&
@ -1131,8 +1132,7 @@ static CURLcode verifyhost(struct connectdata *conn,
if(data->set.ssl.verifyhost > 1) {
failf(data, "SSL: certificate subject name '%s' does not match "
"target host name '%s'", peer_CN, conn->host.dispname);
OPENSSL_free(peer_CN);
return CURLE_SSL_PEER_CERTIFICATE ;
res = CURLE_SSL_PEER_CERTIFICATE;
}
else
infof(data, "\t common name: %s (does not match '%s')\n",
@ -1140,10 +1140,11 @@ static CURLcode verifyhost(struct connectdata *conn,
}
else {
infof(data, "\t common name: %s (matched)\n", peer_CN);
OPENSSL_free(peer_CN);
}
if(peer_CN)
OPENSSL_free(peer_CN);
}
return CURLE_OK;
return res;
}
#endif