Commit e43a13c8 authored by Matt Caswell's avatar Matt Caswell
Browse files

Fix leak in HMAC error path 



In the event of an error in the HMAC function, leaks can occur because the
HMAC_CTX does not get cleaned up.

Thanks to the BoringSSL project for reporting this issue.

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 68886be7

crypto/hmac/hmac.c

+1 −0
Original line number Diff line number Diff line
@@ -219,6 +219,7 @@ unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, 
    HMAC_CTX_cleanup(&c);

    return md;

 err:

    HMAC_CTX_cleanup(&c);

    return NULL;

}