You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2021/12/22 07:06:47 UTC
[Bug 65760] New: Resource leaks in mod_ssl_ct.c
https://bz.apache.org/bugzilla/show_bug.cgi?id=65760
Bug ID: 65760
Summary: Resource leaks in mod_ssl_ct.c
Product: Apache httpd-2
Version: 2.5-HEAD
Hardware: PC
OS: All
Status: NEW
Severity: normal
Priority: P2
Component: mod_ssl
Assignee: bugs@httpd.apache.org
Reporter: ryancaicse@gmail.com
Target Milestone: ---
In the method ct_static_scts, fclose(pemfile) and X509_free(cert) also should
be put before Line 2970. Otherwise there are memory leaks. Is it true?
https://github.com/apache/httpd/blob/21f16155c38e406e0a0daaa60a539d66128cf044/modules/ssl/mod_ssl_ct.c#L2962-L2974
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65760] Resource leaks in mod_ssl_ct.c
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65760
--- Comment #2 from Matt <ma...@gmail.com> ---
Resource leaks in mod_ssl_ct.c can occur when resources allocated during the
execution of the code are not properly released when they are no longer needed.
These can include file descriptors, memory allocations, and other system
resources. https://fixerrs.com
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org
[Bug 65760] Resource leaks in mod_ssl_ct.c
Posted by bu...@apache.org.
https://bz.apache.org/bugzilla/show_bug.cgi?id=65760
Christophe JAILLET <ch...@wanadoo.fr> changed:
What |Removed |Added
----------------------------------------------------------------------------
Resolution|--- |FIXED
Status|NEW |RESOLVED
--- Comment #1 from Christophe JAILLET <ch...@wanadoo.fr> ---
Hi,
thx for the report. This is fixed in trunk in r1896361.
This code is not part of 2.4.x, so no backport is needed.
Only the fclose() is needed. In this error handling path, cert is NULL, so
X509_free(cert) is not needed.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org