diff options
author | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-08-06 19:05:58 +0100 |
---|---|---|
committer | Paul Kehrer <paul.l.kehrer@gmail.com> | 2015-08-06 19:05:58 +0100 |
commit | 6477d4807d2b238412da9669875f0e9fed24826c (patch) | |
tree | 22173a18f9624b8a381c97d83345f2db9cdf7751 /src | |
parent | b4fdc5e77a0cb23d1db4b344eaea4be2389d2148 (diff) | |
download | cryptography-6477d4807d2b238412da9669875f0e9fed24826c.tar.gz cryptography-6477d4807d2b238412da9669875f0e9fed24826c.tar.bz2 cryptography-6477d4807d2b238412da9669875f0e9fed24826c.zip |
X509_add_ext dupes the X509_EXTENSION when adding it. fix the leak
Diffstat (limited to 'src')
-rw-r--r-- | src/cryptography/hazmat/backends/openssl/backend.py | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py index 0cbea1f0..0b3b7f6a 100644 --- a/src/cryptography/hazmat/backends/openssl/backend.py +++ b/src/cryptography/hazmat/backends/openssl/backend.py @@ -1187,6 +1187,8 @@ class Backend(object): 1 if extension.critical else 0, _encode_asn1_str_gc(self, pp[0], r) ) + assert extension != self._ffi.NULL + extension = self._ffi.gc(extension, self._lib.X509_EXTENSION_free) res = self._lib.X509_add_ext(x509_cert, extension, i) assert res == 1 |