tree 7b0659f5bbf58c99903f41d5dc54a4884ac950d7
parent 2b5a6559460b41dd6db2740cc961b461cef12edc
author Remi Tricot-Le Breton <rlebreton@haproxy.com> 1643981055 +0100
committer William Lallemand <wlallemand@haproxy.org> 1644952100 +0100

BUG/MINOR: jwt: Memory leak if same key is used in multiple jwt_verify calls

If the same filename was specified in multiple calls of the jwt_verify
converter, we would have parsed the contents of the file every time it
was used instead of checking if the entry already existed in the tree.
This lead to memory leaks because we would not insert the duplicated
entry and we would not free it (as well as the EVP_PKEY it referenced).
We now check the return value of ebst_insert and free the current entry
if it is a duplicate of an existing entry.
The order in which the tree insert and the pkey parsing happen was also
switched in order to avoid parsing key files in case of duplicates.

Should be backported to 2.5.