[trafficserver] branch 8.0.x updated: Fixes leak when no OCSP URL is available

[zwoop]

This is an automated email from the ASF dual-hosted git repository.

zwoop pushed a commit to branch 8.0.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git


The following commit(s) were added to refs/heads/8.0.x by this push:
     new 8d46573  Fixes leak when no OCSP URL is available
8d46573 is described below

commit 8d4657345301d45f98f802abb4207bd18998e992
Author: Randall Meyer <randallme...@yahoo.com>
AuthorDate: Mon Oct 22 07:59:37 2018 -0700

    Fixes leak when no OCSP URL is available
    
    (cherry picked from commit 19a55a2679dda03f1258e097a82c27c98f00efbc)
---
 iocore/net/OCSPStapling.cc | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/iocore/net/OCSPStapling.cc b/iocore/net/OCSPStapling.cc
index dbd5819..a6497b0 100644
--- a/iocore/net/OCSPStapling.cc
+++ b/iocore/net/OCSPStapling.cc
@@ -185,6 +185,9 @@ ssl_stapling_init_cert(SSL_CTX *ctx, X509 *cert, const char 
*certname)
   }
 
   if (!cinf->uri) {
+    OCSP_CERTID_free(cinf->cid);
+    cinf->cid = nullptr;
+
     Note("no OCSP responder URI for %s", certname);
     return false;
   }