Skip to content

Fix memory leaks and use-after-free detected by ASan - #735

Closed
jfclere wants to merge 1 commit into
apache:trunkfrom
jfclere:fix-asan-leaks
Closed

Fix memory leaks and use-after-free detected by ASan#735
jfclere wants to merge 1 commit into
apache:trunkfrom
jfclere:fix-asan-leaks

Conversation

@jfclere

@jfclere jfclere commented Sep 3, 2026

Copy link
Copy Markdown
Contributor

Summary:

  • a2md: fix allocator leak by setting pool ownership and destroying pool on exit
  • md_crypt: fix EVP_PKEY leak by moving cleanup registration into make_pkey()
  • md_crypt: fix ASN1_TIME leak in self-signed cert creation
  • md_crypt: fix AUTHORITY_KEYID leak in md_cert_get_ari_cert_id()
  • md_acme: fix use-after-free accessing req after on_response already freed it
  • md_json: fix stack-use-after-return in md_json_itera() and md_json_iterkey()
  • mod_ssl: fix cipher list leak in ssl_hook_Access_classic() on early return for secondary connections
    Note that pyhttp testsuite triggers those.
    coauthored by Claude Opus 4.6

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant