aboutsummaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorPaul Kehrer <paul.l.kehrer@gmail.com>2015-08-06 19:05:58 +0100
committerPaul Kehrer <paul.l.kehrer@gmail.com>2015-08-06 19:05:58 +0100
commit6477d4807d2b238412da9669875f0e9fed24826c (patch)
tree22173a18f9624b8a381c97d83345f2db9cdf7751 /src
parentb4fdc5e77a0cb23d1db4b344eaea4be2389d2148 (diff)
downloadcryptography-6477d4807d2b238412da9669875f0e9fed24826c.tar.gz
cryptography-6477d4807d2b238412da9669875f0e9fed24826c.tar.bz2
cryptography-6477d4807d2b238412da9669875f0e9fed24826c.zip
X509_add_ext dupes the X509_EXTENSION when adding it. fix the leak
Diffstat (limited to 'src')
-rw-r--r--src/cryptography/hazmat/backends/openssl/backend.py2
1 files changed, 2 insertions, 0 deletions
diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index 0cbea1f0..0b3b7f6a 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -1187,6 +1187,8 @@ class Backend(object):
1 if extension.critical else 0,
_encode_asn1_str_gc(self, pp[0], r)
)
+ assert extension != self._ffi.NULL
+ extension = self._ffi.gc(extension, self._lib.X509_EXTENSION_free)
res = self._lib.X509_add_ext(x509_cert, extension, i)
assert res == 1