Skip to content

20240626-EvictSessionFromCache-ticketNonce-data-leak#7687

Merged
JacobBarthelmeh merged 1 commit intowolfSSL:masterfrom
douzzer:20240626-EvictSessionFromCache-ticketNonce-data-leak
Jun 27, 2024
Merged

20240626-EvictSessionFromCache-ticketNonce-data-leak#7687
JacobBarthelmeh merged 1 commit intowolfSSL:masterfrom
douzzer:20240626-EvictSessionFromCache-ticketNonce-data-leak

Conversation

@douzzer
Copy link
Copy Markdown
Contributor

@douzzer douzzer commented Jun 26, 2024

src/ssl_sess.c: in EvictSessionFromCache(), free session->ticketNonce.data if it was dynamically allocated. fixes memory leak via wolfSSL_Cleanup().

for history see 56d6087 and 1106e5f.

detected by wolfssl-multi-test.sh ... all-noasm-valgrind-unittest

tested with

LD_LIBRARY_PATH=./src/.libs saferun valgrind --tool=memcheck --leak-check=full --show-leak-kinds=all --show-reachable=yes --leak-resolution=high --track-fds=yes --track-origins=yes --fullpath-after= --error-exitcode=10 ./tests/.libs/unit.test

also tested with wolfssl-multi-test.sh ... super-quick-check

….data if it was dynamically allocated. fixes memory leak via wolfSSL_Cleanup().
@douzzer douzzer added the For This Release Release version 5.9.1 label Jun 26, 2024
@douzzer douzzer requested review from rizlik, tmael and wolfSSL-Bot June 26, 2024 19:27
@JacobBarthelmeh JacobBarthelmeh merged commit c047e55 into wolfSSL:master Jun 27, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

For This Release Release version 5.9.1

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants