From 4e0752535eb87b9aab4cf193f4422b5801ab7b32 Mon Sep 17 00:00:00 2001 From: Viktor Dukhovni Date: Fri, 9 Feb 2018 18:34:33 -0500 Subject: [PATCH] Avoid leaking peername data via accept BIOs Reviewed-by: Rich Salz --- crypto/bio/bss_acpt.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/crypto/bio/bss_acpt.c b/crypto/bio/bss_acpt.c index e426ecd7fd..72ad6a19a9 100644 --- a/crypto/bio/bss_acpt.c +++ b/crypto/bio/bss_acpt.c @@ -275,6 +275,11 @@ static int acpt_state(BIO *b, BIO_ACCEPT *c) BIO_clear_retry_flags(b); b->retry_reason = 0; + OPENSSL_free(c->cache_peer_name); + c->cache_peer_name = NULL; + OPENSSL_free(c->cache_peer_serv); + c->cache_peer_serv = NULL; + s = BIO_accept_ex(c->accept_sock, &c->cache_peer_addr, c->accepted_mode); -- 2.34.1