According to the docs I have "SSL_get_certificate()" returns a pointer from the SSL* structure and needs no free. Or?
Stefan Eissing <green/>bytes GmbH Hafenweg 16 48155 Münster www.greenbytes.de > Am 07.04.2020 um 11:20 schrieb Ruediger Pluem <rpl...@apache.org>: > > > > On 4/7/20 9:36 AM, Stefan Eissing wrote: >> Oops. Reading my merged change, I see that we do not free the "X590 *issuer" >> from line 134, ssl_util_stapling.c when stapling is >> not active. Can anyone confirm my read? Then I'd make a patch to attach to >> the PR. > > I agree that this needs to be freed. I think there is another one. How about > the 'X509 *x' obtained via SSL_get_certificate > in stapling_cb in line 784 (trunk)? > > Regards > > Rüdiger >