Changeset 6091 for pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c

Timestamp:

Oct 11, 2019 2:26:12 PM (5 years ago)

Author:

riza

Message:

Fix #2244: Prevent continuous memory allocation when getting raw certificate on TLS.

File:

• pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c (modified) (1 diff)

pjproject/trunk/pjlib/src/pj/ssl_sock_ossl.c

@@ -1710 +1710 @@
     chain = SSL_get_peer_cert_chain(ossock->ossl_ssl);
     if (chain) {
-       ssl_update_remote_cert_chain_info(ssock->pool,
-                                         &ssock->remote_cert_info,
-                                         chain, PJ_TRUE);
+        pj_pool_reset(ssock->info_pool);
+        ssl_update_remote_cert_chain_info(ssock->info_pool,
+                                          &ssock->remote_cert_info,
+                                          chain, PJ_TRUE);
     } else {
-       ssock->remote_cert_info.raw_chain.cnt = 0;
+        ssock->remote_cert_info.raw_chain.cnt = 0;
     }
 }