RFR: 8375684: Avoid leak in KeystoreImpl.m when using CFArrayCreateMutable

Matthias Baesken mbaesken at openjdk.org
Fri Jan 23 09:21:30 UTC 2026


On Tue, 20 Jan 2026 16:47:29 GMT, Matthias Baesken <mbaesken at openjdk.org> wrote:

> In KeystoreImpl.m we use CFArrayCreateMutable, but we do not always CFRelease the resources we created.
> This should be adjusted.
> 
> See
> https://developer.apple.com/documentation/corefoundation/cfarraycreatemutable(_:_:_:)
> 
> return value is  
> A new mutable array, or NULL if there was a problem creating the object. Ownership follows the [The Create Rule](https://developer.apple.com/library/archive/documentation/CoreFoundation/Conceptual/CFMemoryMgmt/Concepts/Ownership.html#//apple_ref/doc/uid/20001148-103029).

@wangweij , could you please comment on the potential function usages that miss CFRelease ?
Should I address the other too in this PR or better in another one  ?

-------------

PR Comment: https://git.openjdk.org/jdk/pull/29326#issuecomment-3789233374


More information about the security-dev mailing list