[tor-bugs] #20715 [Core Tor/Tor]: memory leak in tor_cert_parse()

[Tor Bug Tracker & Wiki]

#20715: memory leak in tor_cert_parse()
------------------------------------------+--------------------------------
 Reporter:  arma                          |          Owner:
     Type:  defect                        |         Status:  needs_revision
 Priority:  Medium                        |      Milestone:  Tor:
                                          |  0.2.9.x-final
Component:  Core Tor/Tor                  |        Version:  Tor:
                                          |  0.2.9.5-alpha
 Severity:  Normal                        |     Resolution:
 Keywords:  028-backport review-group-13  |  Actual Points:
Parent ID:                                |         Points:
 Reviewer:  nickm                         |        Sponsor:
------------------------------------------+--------------------------------

Comment (by nickm):

 The issue here is that you can't free "dest" in the way that you do, since
 signed_descriptor_t might not be a pointer to a chunk that was returned by
 tor_malloc().  It might be part of a routerinfo_t structure, for example.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20715#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online