denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

eap-ttls: Fix memory leaks in error cases related to EAP-Identity handling

Browse Source 
Should be rare that the eap-identity plugin is not loaded when
authenticating clients with EAP.  And the second error path will
currently never get used as `process()` always succeeds.

Fixes: 79f2102cb4 ("implemented server side support for EAP-TTLS")
This commit is contained in:
Tobias Brunner
2026-07-24 08:47:39 +02:00
parent f95c6a2e03
commit 94e97eb183
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libcharon/plugins/eap_ttls/eap_ttls_server.c
+2 -1
View File
@@ -231,14 +231,15 @@ METHOD(tls_application_t, process, status_t,
{ {
DBG1(DBG_IKE, "%N method not available", DBG1(DBG_IKE, "%N method not available",
eap_type_names, EAP_IDENTITY); eap_type_names, EAP_IDENTITY);
in->destroy(in);
return FAILED; return FAILED;
} }
} }
if (this->method->process(this->method, in, &this->out) != SUCCESS) if (this->method->process(this->method, in, &this->out) != SUCCESS)
{ {
DBG1(DBG_IKE, "%N method failed", eap_type_names, EAP_IDENTITY); DBG1(DBG_IKE, "%N method failed", eap_type_names, EAP_IDENTITY);
in->destroy(in);
return FAILED; return FAILED;
} }