Certificate Transparency TLS extension patch for NSS

net/third_party/nss/ssl/sslnonce.c

 /* 
  * This file implements the CLIENT Session ID cache.  
  *
  * This Source Code Form is subject to the terms of the Mozilla Public
  * License, v. 2.0. If a copy of the MPL was not distributed with this
  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */
 
 #include "cert.h"
 #include "pk11pub.h"
 #include "secitem.h"
@@ skipping 104 matching lines @@
     int i;
     SSL_TRC(8, ("SSL: destroy sid: sid=0x%x cached=%d", sid, sid->cached));
     PORT_Assert((sid->references == 0));
 
     if (sid->cached == in_client_cache)
         return; /* it will get taken care of next time cache is traversed. */
 
     if (sid->version < SSL_LIBRARY_VERSION_3_0) {
         SECITEM_ZfreeItem(&sid->u.ssl2.masterKey, PR_FALSE);
         SECITEM_ZfreeItem(&sid->u.ssl2.cipherArg, PR_FALSE);
+    } else {
+        if (sid->u.ssl3.sessionTicket.ticket.data) {
+            SECITEM_FreeItem(&sid->u.ssl3.sessionTicket.ticket, PR_FALSE);
+        }
+        if (sid->u.ssl3.srvName.data) {
+            SECITEM_FreeItem(&sid->u.ssl3.srvName, PR_FALSE);
+        }
+        if (sid->u.ssl3.signedCertTimestamps.data) {
+            SECITEM_FreeItem(&sid->u.ssl3.signedCertTimestamps, PR_FALSE);
+        }
+        if (sid->u.ssl3.originalHandshakeHash.data) {
+          SECITEM_FreeItem(&sid->u.ssl3.originalHandshakeHash, PR_FALSE);
+        }
     }
+
     if (sid->peerID != NULL)
         PORT_Free((void *)sid->peerID);         /* CONST */
 
     if (sid->urlSvrName != NULL)
         PORT_Free((void *)sid->urlSvrName);     /* CONST */
 
     if ( sid->peerCert ) {
         CERT_DestroyCertificate(sid->peerCert);
     }
     for (i = 0; i < MAX_PEER_CERT_CHAIN_SIZE && sid->peerCertChain[i]; i++) {
         CERT_DestroyCertificate(sid->peerCertChain[i]);
     }
     if (sid->peerCertStatus.items) {
         SECITEM_FreeArray(&sid->peerCertStatus, PR_FALSE);
     }
 
     if ( sid->localCert ) {
         CERT_DestroyCertificate(sid->localCert);
     }
-    if (sid->u.ssl3.sessionTicket.ticket.data) {
-        SECITEM_FreeItem(&sid->u.ssl3.sessionTicket.ticket, PR_FALSE);
-    }
-    if (sid->u.ssl3.srvName.data) {
-        SECITEM_FreeItem(&sid->u.ssl3.srvName, PR_FALSE);
-    }
-    if (sid->u.ssl3.originalHandshakeHash.data) {
-        SECITEM_FreeItem(&sid->u.ssl3.originalHandshakeHash, PR_FALSE);
-    }
-    
+
     PORT_ZFree(sid, sizeof(sslSessionID));
 }
 
 /* BEWARE: This function gets called for both client and server SIDs !!
  * Decrement reference count, and 
  *    free sid if ref count is zero, and sid is not in the cache. 
  * Does NOT remove from the cache first.  
  * If the sid is still in the cache, it is left there until next time
  * the cache list is traversed.
  */
@@ skipping 285 matching lines @@
         sid->u.ssl3.sessionTicket.ticket.len = 0;
     }
     sid->u.ssl3.sessionTicket.received_timestamp =
         session_ticket->received_timestamp;
     sid->u.ssl3.sessionTicket.ticket_lifetime_hint =
         session_ticket->ticket_lifetime_hint;
 
     UNLOCK_CACHE;
     return SECSuccess;
 }