Fix memory leak in libpq when using sslmode=verify-full
authorMichael Paquier
Tue, 21 Apr 2020 22:27:49 +0000 (07:27 +0900)
committerMichael Paquier
Tue, 21 Apr 2020 22:27:49 +0000 (07:27 +0900)
commit35d08658d1cccc3f3c248dfc211bdff96fddfead
tree9da4e674b055b52f04ac91bceb2cbdbe9c681ea9
parent97dcd5cd1500184903ae66ea9629efb04e4da0b9
Fix memory leak in libpq when using sslmode=verify-full

Checking if Subject Alternative Names (SANs) from a certificate match
with the hostname connected to leaked memory after each lookup done.

This is broken since acd08d7 that added support for SANs in SSL
certificates, so backpatch down to 9.5.

Author: Roman Peshkurov
Reviewed-by: Hamid Akhtar, Michael Paquier, David Steele
Discussion: https://postgr.es/m/CALLDf-pZ-E3mjxd5=bnHsDu9zHEOnpgPgdnO84E2RuwMCjjyPw@mail.gmail.com
Backpatch-through: 9.5
src/interfaces/libpq/fe-secure-openssl.c