Commit f6c006ea authored by FdaSilvaYY's avatar FdaSilvaYY
Browse files

Fix a possible leak on NETSCAPE_SPKI_verify failure. 



Reviewed-by: default avatarStephen Henson <steve@openssl.org>
Reviewed-by: default avatarRich Salz <rsalz@openssl.org>
parent c5137473

apps/ca.c

+1 −0
Original line number Diff line number Diff line
@@ -2071,6 +2071,7 @@ static int certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, 


    j = NETSCAPE_SPKI_verify(spki, pktmp);

    if (j <= 0) {

        EVP_PKEY_free(pktmp);

        BIO_printf(bio_err,

                   "signature verification failed on SPKAC public key\n");

        goto end;