BUG/MINOR: ssl: Free key_base from global_ssl structure during deinit
authorRemi Tricot-Le Breton <rlebreton@haproxy.com>
Fri, 10 Oct 2025 15:05:22 +0000 (17:05 +0200)
committerWilly Tarreau <w@1wt.eu>
Thu, 16 Oct 2025 09:05:24 +0000 (11:05 +0200)
The key_base field of the global_ssl structure is an strdup'ed field
(when set) which was never free'd during deinit.

This patch can be backported up to branch 3.0.

(cherry picked from commit b706f2d092b02e8e37662d407d3a2a4914872988)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 20ac503865d106003188710a55746876446dfb3a)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 23be68fe35e0e045109a9f5caf394ea4bef7949b)
Signed-off-by: Willy Tarreau <w@1wt.eu>

src/ssl_sock.c

index b390d7f..bc37686 100644 (file)
@@ -7616,6 +7616,7 @@ static void ssl_sock_clt_sni_free_func(void *parent, void *ptr, CRYPTO_EX_DATA *
 static void ssl_free_global(void)
 {
        ha_free(&global_ssl.crt_base);
+       ha_free(&global_ssl.key_base);
        ha_free(&global_ssl.ca_base);
 
        ha_free(&global_ssl.issuers_chain_path);