DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG 
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25659>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND 
INSERTED IN THE BUG DATABASE.

http://nagoya.apache.org/bugzilla/show_bug.cgi?id=25659

Memory leak in ssl_util_algotypeof().

           Summary: Memory leak in ssl_util_algotypeof().
           Product: Apache httpd-2.0
           Version: 2.1-HEAD
          Platform: PC
        OS/Version: Windows XP
            Status: NEW
          Severity: Normal
          Priority: Other
         Component: mod_ssl
        AssignedTo: [email protected]
        ReportedBy: [EMAIL PROTECTED]


The function ssl_util_algotypeof(X509 *pCert, EVP_PKEY *pKey) allows being 
called with the parameter pKey == NULL.  The parameter pKey is allocated with 
X509_get_pubkey() which needs a matching call to EVP_PKEY_free(pKey) somewhere.

Since the parameter for pKey was pass in as NULL the calling function doesn't 
have a way of freeing it so a conditional check is needed for this case.  The 
patch I have provided checks the pKey parameter for NULL and sets a boolean so 
that before exiting the function we can conditionally free pKey.

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to