From bcc311668ede6ffdcd6dc5a65454a548b5404fcc Mon Sep 17 00:00:00 2001

From: zhu qun-ying <qunying@yahoo.com>

Date: Mon, 2 Jun 2014 14:38:52 +0100

Subject: [PATCH] Free up s->d1->buffered_app_data.q properly.

PR#3286

(cherry picked from commit 71e95000afb2227fe5cac1c79ae884338bcd8d0b)

---

 ssl/d1_lib.c | 9 ++++++---

 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/ssl/d1_lib.c b/ssl/d1_lib.c

index 106939f..6bde16f 100644

--- a/ssl/d1_lib.c

+++ b/ssl/d1_lib.c

@@ -176,9 +176,12 @@ static void dtls1_clear_queues(SSL *s)

 	while ( (item = pqueue_pop(s->d1->buffered_app_data.q)) != NULL)

 		{

-		frag = (hm_fragment *)item->data;

-		OPENSSL_free(frag->fragment);

-		OPENSSL_free(frag);

+		rdata = (DTLS1_RECORD_DATA *) item->data;

+		if (rdata->rbuf.buf)

+			{

+			OPENSSL_free(rdata->rbuf.buf);

+			}

+		OPENSSL_free(item->data);

 		pitem_free(item);

 		}

 	}

-- 

2.1.0