curl/lib/vtls
Daniel Stenberg 961a13e366
rustls: fix memory leak on repeated SSLKEYLOGFILE fails
Before this fix, Curl_tls_keylog_open() assigned the environment
variable result to a global keylog_file_name without freeing any prior
allocation. If the file cannot be opened (e.g., permission error)
keylog_file_fp stays NULL, so subsequent calls to Curl_tls_keylog_open
will overwrite keylog_file_name and leak the previous allocation.

Spotted by Codex Security

Closes #21427
2026-04-23 22:58:39 +02:00
..
apple.c
apple.h
cipher_suite.c
cipher_suite.h
gtls.c
gtls.h
hostcheck.c
hostcheck.h
keylog.c rustls: fix memory leak on repeated SSLKEYLOGFILE fails 2026-04-23 22:58:39 +02:00
keylog.h vtls: log when key logging is enabled. 2026-04-23 08:13:59 +02:00
mbedtls.c
mbedtls.h
openssl.c openssl: fix unused variable warnings in !verbose builds 2026-04-20 02:37:35 +02:00
openssl.h
rustls.c
rustls.h
schannel.c
schannel.h
schannel_int.h
schannel_verify.c
vtls.c vtls: fix comment typos and tidy up a type 2026-04-23 12:31:11 +02:00
vtls.h
vtls_int.h
vtls_scache.c vtls_scache: check reentrancy 2026-04-20 11:22:00 +02:00
vtls_scache.h lib: minor comment typos 2026-04-20 23:48:37 +02:00
vtls_spack.c
vtls_spack.h
wolfssl.c
wolfssl.h wolfssl: fix -Wmissing-prototypes 2026-04-21 10:09:58 +02:00
x509asn1.c
x509asn1.h