Bug #7996: tls: certificate SAN is freed in case of any error - Suricata - Open Information Security Foundation

Actions

Copy link

Bug #7996

closed

tls: certificate SAN is freed in case of any error

Added by Shivani Bhardwaj 27 days ago. Updated 8 days ago.

Status:

Closed

Priority:

Normal

Assignee:

Shivani Bhardwaj

Target version:

9.0.0-beta1

Affected Versions:

Effort:

Difficulty:

low

Label:

Description

The connp object must retain all certificate params that have been parsed successfully for a match later on. In case of an error during decoding/parsing SAN are freed from connp. This works so far because it is the last field to be parsed and if it errors out, it does not exist anyway. However, this leaves room for memory errors.

Subtasks 1 (0 open — 1 closed)