]> git.kaiwu.me - nginx.git/commit
SSL: missing free calls in $ssl_client_s_dn and $ssl_client_i_dn.
authorNikolay Morozov <n.morozov@securitycode.ru>
Tue, 26 Mar 2019 06:33:57 +0000 (09:33 +0300)
committerNikolay Morozov <n.morozov@securitycode.ru>
Tue, 26 Mar 2019 06:33:57 +0000 (09:33 +0300)
commit52d9da8790a272a43ac1907c8ba55063bd9a38fe
treea4a1bda1424a856d29612505a0a4ffeac0125a6e
parent1c906828aee64d8ac7eb4df57f9134e27e709a3d
SSL: missing free calls in $ssl_client_s_dn and $ssl_client_i_dn.

If X509_get_issuer_name() or X509_get_subject_name() returned NULL,
this could lead to a certificate reference leak.  It cannot happen
in practice though, since each function returns an internal pointer
to a mandatory subfield of the certificate successfully decoded by
d2i_X509() during certificate message processing (closes #1751).
src/event/ngx_event_openssl.c