Full_Name: Thomas
Version: 2.1.2
OS: Linux
URL: 
Submission from: (NULL) (212.172.64.210)


openssl-0.9.7 does not use the ext_free member for certificate
extensions anymore and sets it to 0. Calling method->ext_free() crashes
OpenLDAP. Instead, XXX_free() should be used:

--- ./libraries/libldap/tls.c.tb_orig   Mon Jul  1 18:03:42 2002
+++ ./libraries/libldap/tls.c   Fri Jul  5 14:42:16 2002
@@ -918,7 +918,6 @@
                        int n, len1, len2 = 0;
                        char *domain;
                        GENERAL_NAME *gn;
-                       X509V3_EXT_METHOD *method;
 
                        len1 = strlen(name);
                        n = sk_GENERAL_NAME_num(alt);
@@ -955,8 +954,7 @@
                                }
                        }
 
-                       method = X509V3_EXT_get(ex);
-                       method->ext_free(alt);
+                       GENERAL_NAMES_free(alt);
                        if (i < n) {    /* Found a match */
                                ret = LDAP_SUCCESS;
                        }

Regards,
Thomas