From f25b1aca8ba62bdc221b8aa2f86c0dfae0f9d56a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Jean-Fran=C3=A7ois=20Hren?= Date: Mon, 1 Dec 2025 17:02:39 +0100 Subject: [PATCH] credential-manager: Fix leaked signature params if self-signed cert is untrusted Closes strongswan/strongswan#2954 --- src/libstrongswan/credentials/credential_manager.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/libstrongswan/credentials/credential_manager.c b/src/libstrongswan/credentials/credential_manager.c index dd6b89488..4f1812121 100644 --- a/src/libstrongswan/credentials/credential_manager.c +++ b/src/libstrongswan/credentials/credential_manager.c @@ -788,6 +788,7 @@ static bool verify_trust_chain(private_credential_manager_t *this, DBG1(DBG_CFG, " self-signed certificate \"%Y\" is not " "trusted", current->get_subject(current)); issuer->destroy(issuer); + signature_params_destroy(scheme); call_hook(this, CRED_HOOK_UNTRUSTED_ROOT, current); break; }