From 7b0190cb262ae5d24703581263043b04bed29642 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Mon, 23 Mar 2026 19:03:58 +0100 Subject: [PATCH] revocation: Fix memory leak if nonce in OCSP response doesn't match --- src/libstrongswan/plugins/revocation/revocation_fetcher.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libstrongswan/plugins/revocation/revocation_fetcher.c b/src/libstrongswan/plugins/revocation/revocation_fetcher.c index 36c74921e..5835077ad 100644 --- a/src/libstrongswan/plugins/revocation/revocation_fetcher.c +++ b/src/libstrongswan/plugins/revocation/revocation_fetcher.c @@ -269,6 +269,7 @@ METHOD(revocation_fetcher_t, fetch_ocsp, certificate_t*, ocsp_response->get_nonce(ocsp_response))) { DBG1(DBG_CFG, "nonce in ocsp response doesn't match"); + response->destroy(response); request->destroy(request); return NULL; }