According to the docs I have "SSL_get_certificate()" returns a pointer from the 
SSL* structure and needs no free. Or?

Stefan Eissing

<green/>bytes GmbH
Hafenweg 16
48155 Münster
www.greenbytes.de

> Am 07.04.2020 um 11:20 schrieb Ruediger Pluem <rpl...@apache.org>:
> 
> 
> 
> On 4/7/20 9:36 AM, Stefan Eissing wrote:
>> Oops. Reading my merged change, I see that we do not free the "X590 *issuer" 
>> from line 134, ssl_util_stapling.c when stapling is
>> not active. Can anyone confirm my read? Then I'd make a patch to attach to 
>> the PR.
> 
> I agree that this needs to be freed. I think there is another one. How about 
> the 'X509 *x' obtained via SSL_get_certificate
> in stapling_cb in line 784 (trunk)?
> 
> Regards
> 
> Rüdiger
> 

Reply via email to