From d7551300e2c87bcd2d7c4cf93ff9960a37f377c7 Mon Sep 17 00:00:00 2001 From: ndossche <7771979+ndossche@users.noreply.github.com> Date: Thu, 12 Mar 2026 08:24:01 +0100 Subject: [PATCH] openssl: Fix stack leak in php_openssl_load_all_certs_from_file() The previous code only freed the stack but not its contents. As reported by https://github.com/php/php-src/commit/4b9e80eae9485e2eacb894566ab18dae6ce70ec5#r179336568 --- ext/openssl/openssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ext/openssl/openssl.c b/ext/openssl/openssl.c index 2f2aae1e7335b..3452ebae5db5c 100644 --- a/ext/openssl/openssl.c +++ b/ext/openssl/openssl.c @@ -2330,7 +2330,7 @@ static STACK_OF(X509) *php_openssl_load_all_certs_from_file( ret = stack; end: BIO_free(in); - sk_X509_INFO_free(sk); + sk_X509_INFO_pop_free(sk, X509_INFO_free); return ret; }