[squid-dev] [PATCH] Segfault when freeing https_port clientca on reconfigure or exit

[Alex Rousskov]

Fixed segmentation fault when freeing https_port clientca on reconfigure
or exit.

AnyP::PortCfg::clientCA list was double-freed, because the SSL context
takes ownership of the STACK_OF(X509_NAME) supplied via
SSL_CTX_set_client_CA_list(), but Squid was not aware of that. Squid now
supplies a clone of clientCA.

Alex.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: SQUID-87-port-clientca-double-free-t4.patch
Type: text/x-diff
Size: 3604 bytes
Desc: not available
URL: <http://lists.squid-cache.org/pipermail/squid-dev/attachments/20150611/524d7239/attachment.patch>