commit cc781e31f37d53c7d8ba0654db4e47e04c88f662
author Alex Gaynor <alex.gaynor@gmail.com> Sun Jul 05 12:43:20 2015 -0400
committer Alex Gaynor <alex.gaynor@gmail.com> Sun Jul 05 12:43:20 2015 -0400
tree e2925f8c0bee7742e81a968563f8bca52251c020
parent 8df780814d0f779dd80bf093ec8fcefc2071b248

fixed a leak in the event of non-DNS GN

src/cryptography/hazmat/backends/openssl/backend.py

diff --git a/src/cryptography/hazmat/backends/openssl/backend.py b/src/cryptography/hazmat/backends/openssl/backend.py
index 06801bc..bbec618 100644
--- a/src/cryptography/hazmat/backends/openssl/backend.py
+++ b/src/cryptography/hazmat/backends/openssl/backend.py
@@ -146,10 +146,11 @@
     )
 
     for alt_name in san:
-        gn = backend._lib.GENERAL_NAME_new()
-        assert gn != backend._ffi.NULL
         if isinstance(alt_name, x509.DNSName):
+            gn = backend._lib.GENERAL_NAME_new()
+            assert gn != backend._ffi.NULL
             gn.type = backend._lib.GEN_DNS
+
             ia5 = backend._lib.ASN1_IA5STRING_new()
             assert ia5 != backend._ffi.NULL