tree 164e9b1f9355ccf0dc9e7d3471bf883bb694a7ee
parent 90e3b6e68c0a9ff79de8cfb92fa81e6cd2a9d57d
author David Benjamin <davidben@google.com> 1670991624 -0500
committer Boringssl LUCI CQ <boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com> 1671683537 +0000

Fix some memory leaks in policy_cache_new.

If a certificate has policy constraints, but the certificate policies
extension is either missing or unsuitable (in a way not caught by the
parser), the policy constraints object is leaked.

As part of this, add some basic tests for policy constraints.

Change-Id: I4a2c618019d1f92b0f3b9ad4cf6e29d4926e3095
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/55752
Reviewed-by: Bob Beck <bbe@google.com>
Commit-Queue: David Benjamin <davidben@google.com>