From 7663ef444f282fbefa76422a826833a68b3f187d Mon Sep 17 00:00:00 2001
From: Quanah Gibson-Mount <quanah@openldap.org>
Date: Fri, 5 Dec 2008 18:31:06 +0000
Subject: [PATCH] ITS#5849

---
 CHANGES                 | 1 +
 libraries/libldap/tls.c | 1 +
 2 files changed, 2 insertions(+)

diff --git a/CHANGES b/CHANGES
index f551107a15..bccd160fea 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,6 +1,7 @@
 OpenLDAP 2.4 Change Log
 
 OpenLDAP 2.4.14 Engineering
+	Fixed libldap peer cert memory leak (ITS#5849)
 	Fixed libldap_r deref building (ITS#5768)
 	Fixed slapd syncrepl rename handling (ITS#5809)
 	Build Environment
diff --git a/libraries/libldap/tls.c b/libraries/libldap/tls.c
index 9b008ddb9c..7bba905124 100644
--- a/libraries/libldap/tls.c
+++ b/libraries/libldap/tls.c
@@ -1735,6 +1735,7 @@ tls_get_cert_dn( tls_session *session, struct berval *dnbv )
 	xn = X509_get_subject_name(x);
 	dnbv->bv_len = i2d_X509_NAME( xn, NULL );
 	dnbv->bv_val = xn->bytes->data;
+	X509_free(x);
 	return 0;
 }
 #endif /* HAVE_GNUTLS */
-- 
2.39.5