From b4ba8a6fb57894e7d614462dc2a011b9855634e7 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Wed, 22 Apr 2026 09:44:38 +0200 Subject: [PATCH] openssl: Fix memory leak if ipAddrBlock is non-canonical --- src/libstrongswan/plugins/openssl/openssl_x509.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/plugins/openssl/openssl_x509.c b/src/libstrongswan/plugins/openssl/openssl_x509.c index 5086feda4..3cedab7ee 100644 --- a/src/libstrongswan/plugins/openssl/openssl_x509.c +++ b/src/libstrongswan/plugins/openssl/openssl_x509.c @@ -982,7 +982,7 @@ static bool parse_ipAddrBlock_ext(private_openssl_x509_t *this, if (!X509v3_addr_is_canonical(blocks)) { - sk_IPAddressFamily_free(blocks); + sk_IPAddressFamily_pop_free(blocks, IPAddressFamily_free); return FALSE; }