From a7a45b09139a022c141bbe479027f579dacdc673 Mon Sep 17 00:00:00 2001
From: Abtin Keshavarzian <abtink@google.com>
Date: Mon, 2 Jun 2025 10:07:08 -0700
Subject: [PATCH] [secure-transport] add `~SecureSession(void)` destructor
 (#11553)

This commit adds a destructor for `SecureSession` which ensures the
freeing of any mbedTls allocated items. This addresses memory leaks
detected by fuzzer tests when `otInstance` is destroyed, though this
situation is unlikely in typical OpenThread stack integrations.
---
 src/core/meshcop/secure_transport.hpp | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/core/meshcop/secure_transport.hpp b/src/core/meshcop/secure_transport.hpp
index 5e2c14f0e..dc32ce29b 100644
--- a/src/core/meshcop/secure_transport.hpp
+++ b/src/core/meshcop/secure_transport.hpp
@@ -221,6 +221,7 @@ public:
 
 protected:
     explicit SecureSession(SecureTransport &aTransport);
+    ~SecureSession(void) { FreeMbedtls(); }
 
     bool IsSessionInUse(void) const { return (mNext != this); }