From 3fe88ee0e5b7f0eca88f86bace50f7d1045f8b71 Mon Sep 17 00:00:00 2001 From: Remi Tricot-Le Breton Date: Fri, 4 Feb 2022 14:06:34 +0100 Subject: [PATCH] BUG/MINOR: jwt: Double free in deinit function The node pointer was not moving properly along the jwt_cert_tree during the deinit which ended in a double free during cleanup (or when checking a configuration that used the jwt_verify converter with an explicit certificate specified). This patch fixes GitHub issue #1533. It should be backported to 2.5. (cherry picked from commit 4930c6c869fb875554d60ce9a2d6362cf16cf295) Signed-off-by: Willy Tarreau --- src/jwt.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/jwt.c b/src/jwt.c index 8c45375..1c13209 100644 --- a/src/jwt.c +++ b/src/jwt.c @@ -363,6 +363,7 @@ static void jwt_deinit(void) node = ebmb_first(&jwt_cert_tree); while (node) { entry = ebmb_entry(node, struct jwt_cert_tree_entry, node); + ebmb_delete(node); ha_free(&entry); node = ebmb_first(&jwt_cert_tree); } -- 1.7.10.4