From b6a59cee474f0688a0af736a11f9889ff30d046b Mon Sep 17 00:00:00 2001 From: Nikita Popov Date: Wed, 11 Dec 2019 10:30:19 +0100 Subject: [PATCH] Free RSA public key in mysqlnd sha256 auth Not sure why this only started showing up as a leak now. --- ext/mysqlnd/mysqlnd_auth.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ext/mysqlnd/mysqlnd_auth.c b/ext/mysqlnd/mysqlnd_auth.c index b08420f268..b916e40b71 100644 --- a/ext/mysqlnd/mysqlnd_auth.c +++ b/ext/mysqlnd/mysqlnd_auth.c @@ -810,6 +810,7 @@ mysqlnd_sha256_auth_get_auth_data(struct st_mysqlnd_authentication_plugin * self *auth_data_len = server_public_key_len; ret = malloc(*auth_data_len); RSA_public_encrypt(passwd_len + 1, (zend_uchar *) xor_str, ret, server_public_key, RSA_PKCS1_OAEP_PADDING); + RSA_free(server_public_key); } } -- 2.40.0