[openssl/openssl] c8309a: ssl/statem/statem_dtls.c: fix leak in dtls1_buffer...

[Huihui Huang]

Branch: refs/heads/openssl-3.0
Home: https://github.com/openssl/openssl
Commit: c8309af74dbd6b48ae23d019875e88b3ef1e0fd3
https://github.com/openssl/openssl/commit/c8309af74dbd6b48ae23d019875e88b3ef1e0fd3
Author: huanghuihui0904 <625...@qq.com>
Date: 2026-03-22 (Sun, 22 Mar 2026)

Changed paths:
M ssl/statem/statem_dtls.c

Log Message:
-----------
ssl/statem/statem_dtls.c: fix leak in dtls1_buffer_message()

pqueue_insert() may fail, but its return value was not checked. This could leak the allocated pitem and handshake fragment. Free them when insertion fails, using pitem_free() for proper cleanup.

Solves https://github.com/openssl/openssl/issues/30442

Fixes #30442

Signed-off-by: huanghuihui0904 <625...@qq.com>

Reviewed-by: Matt Caswell <ma...@openssl.foundation>
Reviewed-by: Frederik Wedel-Heinen <fwh.o...@gmail.com>
Reviewed-by: Eugene Syromiatnikov <es...@openssl.org>
MergeDate: Sat Mar 21 23:34:41 2026
(Merged from https://github.com/openssl/openssl/pull/30443)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications