Skip to content

[bp/1.34] Fix leak in bssl-compat SSL_get_servername()#428

Merged
tedjpoole merged 1 commit intoenvoyproxy:release/v1.34from
tedjpoole:fix_ssl_get_servername_leak_1_34
Dec 4, 2025
Merged

[bp/1.34] Fix leak in bssl-compat SSL_get_servername()#428
tedjpoole merged 1 commit intoenvoyproxy:release/v1.34from
tedjpoole:fix_ssl_get_servername_leak_1_34

Conversation

@tedjpoole
Copy link
Copy Markdown
Contributor

Fixes a leak that can occur if multiple calls are made to SSL_get_servername() from within the same certificate selection callback (see SSL_CTX_set_select_certificate_cb()).

Backport of #427

Signed-off-by: Ted Poole <tpoole@redhat.com>
Copy link
Copy Markdown
Contributor

@twghu twghu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same as #427

@tedjpoole tedjpoole merged commit 7bf4aed into envoyproxy:release/v1.34 Dec 4, 2025
2 of 3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants