comp_methods in a SSL_CTX points at an internal database. Do *not*

free that, since it's shared by all SSL_CTX's, present and future.

diff --git a/ssl/ssl_lib.c b/ssl/ssl_lib.c
index 105bcb2fca8abc8e425230d65d3c2ee37b28e14b..621d101a9ed56e83a0f77a25b5f12703e9fe7adc 100644 (file)
--- a/ssl/ssl_lib.c
+++ b/ssl/ssl_lib.c
@@ -1247,8 +1247,12 @@ void SSL_CTX_free(SSL_CTX *a)
                sk_X509_NAME_pop_free(a->client_CA,X509_NAME_free);
        if (a->extra_certs != NULL)
                sk_X509_pop_free(a->extra_certs,X509_free);
                sk_X509_NAME_pop_free(a->client_CA,X509_NAME_free);
        if (a->extra_certs != NULL)
                sk_X509_pop_free(a->extra_certs,X509_free);

+#if 0 /* This should never be done, since it removes a global database */

        if (a->comp_methods != NULL)
                sk_SSL_COMP_pop_free(a->comp_methods,SSL_COMP_free);
        if (a->comp_methods != NULL)
                sk_SSL_COMP_pop_free(a->comp_methods,SSL_COMP_free);

+#else
+       a->comp_methods = NULL;
+#endif

        OPENSSL_free(a);
        }
 
        OPENSSL_free(a);
        }