commit 6477d4807d2b238412da9669875f0e9fed24826c
author Paul Kehrer <paul.l.kehrer@gmail.com> Thu Aug 06 19:05:58 2015 +0100
committer Paul Kehrer <paul.l.kehrer@gmail.com> Thu Aug 06 19:05:58 2015 +0100
tree 22173a18f9624b8a381c97d83345f2db9cdf7751
parent b4fdc5e77a0cb23d1db4b344eaea4be2389d2148

X509_add_ext dupes the X509_EXTENSION when adding it. fix the leak

src/cryptography/hazmat/backends/openssl/backend.py

diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index 0cbea1f..0b3b7f6 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -1187,6 +1187,8 @@
                 1 if extension.critical else 0,
                 _encode_asn1_str_gc(self, pp[0], r)
             )
+            assert extension != self._ffi.NULL
+            extension = self._ffi.gc(extension, self._lib.X509_EXTENSION_free)
             res = self._lib.X509_add_ext(x509_cert, extension, i)
             assert res == 1