Fix memory leak in OCSP response basic_verify

nabla-c0d3 · Jun 21, 2024 · ea59acf · ea59acf
1 parent b08d317
commit ea59acf
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/nassl/_nassl/nassl_OCSP_RESPONSE.c b/nassl/_nassl/nassl_OCSP_RESPONSE.c
@@ -139,6 +139,7 @@ static PyObject* nassl_OCSP_RESPONSE_basic_verify(nassl_OCSP_RESPONSE_Object *se
 
     verifyRes = OCSP_basic_verify(basicResp, NULL, trustedCAs, 0);
     OCSP_BASICRESP_free(basicResp);
+    X509_STORE_free(trustedCAs);
     if (verifyRes <= 0)
     {
         return raise_OpenSSL_error();