From d5f58a14470e101eda0a19d5f773c07846974026 Mon Sep 17 00:00:00 2001 From: David Slay Date: Fri, 13 Feb 2026 22:49:46 -0600 Subject: [PATCH] fix(esp_https_server): SSL context leak when HTTPS server fails to start --- components/esp_https_server/src/https_server.c | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/components/esp_https_server/src/https_server.c b/components/esp_https_server/src/https_server.c index ea94b3127a..865560777d 100644 --- a/components/esp_https_server/src/https_server.c +++ b/components/esp_https_server/src/https_server.c @@ -1,5 +1,5 @@ /* - * SPDX-FileCopyrightText: 2018-2025 Espressif Systems (Shanghai) CO LTD + * SPDX-FileCopyrightText: 2018-2026 Espressif Systems (Shanghai) CO LTD * * SPDX-License-Identifier: Apache-2.0 */ @@ -448,8 +448,9 @@ esp_err_t httpd_ssl_start(httpd_handle_t *pHandle, struct httpd_ssl_config *conf ret = httpd_start(&handle, &config->httpd); if (ret != ESP_OK) { - free(ssl_ctx); - ssl_ctx = NULL; + if (ssl_ctx) { + free_secure_context(ssl_ctx); + } return ret; }