Commit 60c52697 authored by Tomas Mraz's avatar Tomas Mraz Committed by Rich Salz
Browse files

Deallocate previously loaded SSL CONF module data 



If application explicitly calls CONF_modules_load_file() the SSL
conf module will be initialized twice and the module data would leak.
We need to free it before initializing it again.

Fixes #6835

Reviewed-by: default avatarAndy Polyakov <appro@openssl.org>
Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6948)
parent b1bebbcb

crypto/conf/conf_ssl.c

+1 −0
Original line number Diff line number Diff line
@@ -76,6 +76,7 @@ static int ssl_module_init(CONF_IMODULE *md, const CONF *cnf) 
        goto err;

    }

    cnt = sk_CONF_VALUE_num(cmd_lists);

    ssl_module_free(md);

    ssl_names = OPENSSL_zalloc(sizeof(*ssl_names) * cnt);

    ssl_names_count = cnt;

    for (i = 0; i < ssl_names_count; i++) {