[trafficserver] branch 7.1.x updated: Fixes leak when no OCSP URL is available

[zw...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

zwoop pushed a commit to branch 7.1.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/7.1.x by this push:
     new d902f4a  Fixes leak when no OCSP URL is available
d902f4a is described below

commit d902f4a0a831d30c413f1b199b2448eb4d752755
Author: Randall Meyer <ra...@yahoo.com>
AuthorDate: Mon Oct 22 07:59:37 2018 -0700

    Fixes leak when no OCSP URL is available
    
    (cherry picked from commit 19a55a2679dda03f1258e097a82c27c98f00efbc)
    
    Conflicts:
    	iocore/net/OCSPStapling.cc
---
 iocore/net/OCSPStapling.cc | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/iocore/net/OCSPStapling.cc b/iocore/net/OCSPStapling.cc
index aa300f6..88236f3 100644
--- a/iocore/net/OCSPStapling.cc
+++ b/iocore/net/OCSPStapling.cc
@@ -180,7 +180,10 @@ ssl_stapling_init_cert(SSL_CTX *ctx, X509 *cert, const char *certname)
   }
 
   if (!cinf->uri) {
-    Note("no responder URI for %s", certname);
+    OCSP_CERTID_free(cinf->cid);
+    cinf->cid = nullptr;
+
+    Note("no OCSP responder URI for %s", certname);
     return false;
   }