Skip to content

Commit 07e727d

Browse files
Sashannhorman
authored andcommitted
dane_match_cert() should X509_free() on ->mcert instead
of OPENSSL_free() Fixes: 170b735 "DANE support for X509_verify_cert()" Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Neil Horman <nhorman@openssl.org> MergeDate: Thu Mar 5 12:37:17 2026 (Merged from #30250) (cherry picked from commit 8b5cd6a)
1 parent a2b9978 commit 07e727d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎crypto/x509/x509_vfy.c‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2938,7 +2938,7 @@ static int dane_match_cert(X509_STORE_CTX *ctx, X509 *cert, int depth)
29382938
if (matched || dane->mdpth < 0) {
29392939
dane->mdpth = depth;
29402940
dane->mtlsa = t;
2941-
OPENSSL_free(dane->mcert);
2941+
X509_free(dane->mcert);
29422942
dane->mcert = cert;
29432943
X509_up_ref(cert);
29442944
}

0 commit comments

Comments
 (0)