process_encrypted_request_headers(): Free header memory when failing

... to get the request destination.

OVE-20211201-0002. CVE-2021-44541.

diff --git a/jcc.c b/jcc.c
index 2d6ba77..2beca7b 100644 (file)
--- a/jcc.c
+++ b/jcc.c
@@ -2806,6 +2806,8 @@ static jb_err process_encrypted_request_headers(struct client_state *csp)
          "Failed to get the encrypted request destination");
       ssl_send_data_delayed(&(csp->ssl_client_attr),
          (const unsigned char *)CHEADER, strlen(CHEADER), get_write_delay(csp));
+      destroy_list(headers);
+
       return JB_ERR_PARSE;
    }