pgsql: Fix potential memory leak in pgcrypto - Mailing list pgsql-committers

From Michael Paquier
Subject pgsql: Fix potential memory leak in pgcrypto
Date
Msg-id E1kUJDd-0004kw-DP@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix potential memory leak in pgcrypto

When allocating a EVP context, it would have been possible to leak some
memory allocated directly by OpenSSL, that PostgreSQL lost track of if
the initialization of the context allocated failed.  The cleanup can be
done with EVP_MD_CTX_destroy().

Note that EVP APIs exist since OpenSSL 0.9.7 and we have in the tree
equivalent implementations for older versions since ce9b75d (code
removed with 9b7cd59a as of 10~).  However, in 9.5 and 9.6, the existing
code makes use of EVP_MD_CTX_destroy() and EVP_MD_CTX_create() without
an equivalent implementation when building the tree with OpenSSL 0.9.6
or older, meaning that this code is in reality broken with such versions
since it got introduced in e2838c5.  As we have heard no complains about
that, it does not seem worth bothering with in 9.5 and 9.6, so I have
left that out for simplicity.

Author: Michael Paquier
Discussion: https://postgr.es/m/20201015072212.GC2305@paquier.xyz
Backpatch-through: 9.5

Branch
------
REL_11_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/9141390813e0bbbe315313b232e027fa977c3b21

Modified Files
--------------
contrib/pgcrypto/openssl.c | 1 +
1 file changed, 1 insertion(+)


pgsql-committers by date:

Previous
From: David Rowley
Date:
Subject: pgsql: Prevent overly large and NaN row estimates in relations
Next
From: Amit Kapila
Date:
Subject: pgsql: Change the docs for PARALLEL option of Vacuum.