From fc347820a27c5e5ed1ccfe1c81c4c4eb2a59f9fe Mon Sep 17 00:00:00 2001 From: Larry Stefani Date: Thu, 13 Apr 2017 10:10:42 -0400 Subject: mbedtls: fix memory leak in error path Add missing our_ssl_sessionid free call in mbed_connect_step3(). Closes #1417 --- lib/vtls/mbedtls.c | 1 + 1 file changed, 1 insertion(+) diff --git a/lib/vtls/mbedtls.c b/lib/vtls/mbedtls.c index 7cd2d6d0f..edf30dbd9 100644 --- a/lib/vtls/mbedtls.c +++ b/lib/vtls/mbedtls.c @@ -697,6 +697,7 @@ mbed_connect_step3(struct connectdata *conn, ret = mbedtls_ssl_get_session(&connssl->ssl, our_ssl_sessionid); if(ret) { + free(our_ssl_sessionid); failf(data, "mbedtls_ssl_get_session returned -0x%x", -ret); return CURLE_SSL_CONNECT_ERROR; } -- cgit v1.2.3