Skip to content

Commit 444958d

Browse files
Sashannhorman
authored andcommitted
dane_match_cert() should X509_free() on ->mcert instead
of OPENSSL_free() Fixes: 170b735 "DANE support for X509_verify_cert()" Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <paul.dale@oracle.com> Reviewed-by: Neil Horman <nhorman@openssl.org> MergeDate: Thu Mar 5 12:37:17 2026 (Merged from #30250) (cherry picked from commit 8b5cd6a)
1 parent 8a6e1ba commit 444958d

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

‎crypto/x509/x509_vfy.c‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3016,7 +3016,7 @@ static int dane_match_cert(X509_STORE_CTX *ctx, X509 *cert, int depth)
30163016
break;
30173017
}
30183018

3019-
OPENSSL_free(dane->mcert);
3019+
X509_free(dane->mcert);
30203020
dane->mcert = cert;
30213021
dane->mdpth = depth;
30223022
dane->mtlsa = t;

0 commit comments

Comments
 (0)