curl/lib/vtls
Daniel Stenberg 961a13e366
rustls: fix memory leak on repeated SSLKEYLOGFILE fails
Before this fix, Curl_tls_keylog_open() assigned the environment
variable result to a global keylog_file_name without freeing any prior
allocation. If the file cannot be opened (e.g., permission error)
keylog_file_fp stays NULL, so subsequent calls to Curl_tls_keylog_open
will overwrite keylog_file_name and leak the previous allocation.

Spotted by Codex Security

Closes #21427
2026-04-23 22:58:39 +02:00
..
apple.c badwords: rework exceptions, fix many of them 2026-03-12 01:01:16 +01:00
apple.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
cipher_suite.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
gtls.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
gtls.h clang-tidy: enable more checks, fix fallouts 2026-04-14 02:20:16 +02:00
hostcheck.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
hostcheck.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
keylog.c rustls: fix memory leak on repeated SSLKEYLOGFILE fails 2026-04-23 22:58:39 +02:00
keylog.h vtls: log when key logging is enabled. 2026-04-23 08:13:59 +02:00
mbedtls.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
mbedtls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
openssl.c openssl: fix unused variable warnings in !verbose builds 2026-04-20 02:37:35 +02:00
openssl.h h3: HTTPS-RR use in HTTP/3 2026-04-09 09:30:52 +02:00
rustls.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
rustls.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
schannel.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
schannel_verify.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
vtls.c vtls: fix comment typos and tidy up a type 2026-04-23 12:31:11 +02:00
vtls.h urldata: import port types and conn destination format 2026-03-15 12:02:26 +01:00
vtls_int.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_scache.c vtls_scache: check reentrancy 2026-04-20 11:22:00 +02:00
vtls_scache.h lib: minor comment typos 2026-04-20 23:48:37 +02:00
vtls_spack.c lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
vtls_spack.h lib: use lib source directory as base include path 2026-02-23 16:00:42 +01:00
wolfssl.c h3: HTTPS-RR use in HTTP/3 2026-04-09 09:30:52 +02:00
wolfssl.h wolfssl: fix -Wmissing-prototypes 2026-04-21 10:09:58 +02:00
x509asn1.c build: fix -Wformat-signedness by adjusting printf masks 2026-04-16 10:32:50 +02:00
x509asn1.h x509asn1: fixed and adapted for ASN1tostr unit testing 2026-03-20 13:03:40 +01:00