[php-src] Issue #12987: openssl_csr_sign might leak new cert on error
| From: | bukka | Date: | Wed, 20 Dec 2023 22:04:13 +0000 |
| Subject: | [php-src] Issue #12987: openssl_csr_sign might leak new cert on error | ||
| Groups: | php.bugs | ||
| Request: | Send a blank email to php-bugs+get-246086@lists.php.net to get a copy of this message | ||
Issue: https://github.com/php/php-src/issues/12987
Author: bukka
### Description
The
new_cert variable in openssl_csr_sign implementation is not correctly freed if
there is an error. It should be always checked in the clean if not used (set to the new object) and
if so, then freed.
### PHP Version
PHP 8.2+
### Operating System
_No response_