From: Remi Tricot-Le Breton <rlebreton@haproxy.com>
Date: Fri, 4 Feb 2022 13:21:02 +0000 (+0100)
Subject: BUG/MINOR: jwt: Missing pkey free during cleanup
X-Git-Tag: v2.5.2~9
X-Git-Url: http://git.haproxy.org/?a=commitdiff_plain;h=0cb502720726205fd18f86b08efcfcad0f6ac86f;p=haproxy-2.5.git

BUG/MINOR: jwt: Missing pkey free during cleanup

When emptying the jwt_cert_tree during deinit, the entries are freed but
not the EVP_PKEY reference they kept, leading in a memory leak.

Should be backported in 2.5.

(cherry picked from commit 2b5a6559460b41dd6db2740cc961b461cef12edc)
Signed-off-by: Willy Tarreau <w@1wt.eu>
---

diff --git a/src/jwt.c b/src/jwt.c
index 1c13209..848de99 100644
--- a/src/jwt.c
+++ b/src/jwt.c
@@ -364,6 +364,7 @@ static void jwt_deinit(void)
 	while (node) {
 		entry = ebmb_entry(node, struct jwt_cert_tree_entry, node);
 		ebmb_delete(node);
+		EVP_PKEY_free(entry->pkey);
 		ha_free(&entry);
 		node = ebmb_first(&jwt_cert_tree);
 	}