From fae9dacf5d4ffd13f1e77d086f26b7f1348a6714 Mon Sep 17 00:00:00 2001
From: Bram Matthys <syzop@vulnscan.org>
Date: Sat, 21 Feb 2026 13:55:01 +0100
Subject: [PATCH] Fix some small REHASH leaks: tld->channel, link->connect_ip,
 allow->server (last one is very rare).

---
 src/conf.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/conf.c b/src/conf.c
index 09d3bcf8e..83c56dcd4 100644
--- a/src/conf.c
+++ b/src/conf.c
@@ -2593,6 +2593,7 @@ void config_rehash()
 		next = (ListStruct *)allow_ptr->next;
 		free_security_group(allow_ptr->match);
 		Auth_FreeAuthConfig(allow_ptr->auth);
+		safe_free(allow_ptr->server);
 		DelListItem(allow_ptr, conf_allow);
 		safe_free(allow_ptr);
 	}
@@ -2630,6 +2631,7 @@ void config_rehash()
 		free_motd(&tld_ptr->botmotd);
 
 		free_security_group(tld_ptr->match);
+		safe_free(tld_ptr->channel);
 
 		DelListItem(tld_ptr, conf_tld);
 		safe_free(tld_ptr);
@@ -11311,6 +11313,7 @@ void link_cleanup(ConfigItem_link *link_ptr)
 	safe_free(link_ptr->outgoing.hostname);
 	safe_free(link_ptr->hub);
 	safe_free(link_ptr->leaf);
+	safe_free(link_ptr->connect_ip);
 	if (link_ptr->ssl_ctx)
 	{
 		SSL_CTX_free(link_ptr->ssl_ctx);