Commit d54ac5c4 authored by Matt Caswell's avatar Matt Caswell
Browse files

Free memory on error in PKCS7_dataFinal() 



The PKCS7_dataFinal() function allocates a memory buffer but then fails
to free it on an error condition.

Reviewed-by: default avatarRichard Levitte <levitte@openssl.org>
parent 460c5e1d

crypto/pkcs7/pk7_doit.c

+1 −0
Original line number Diff line number Diff line
@@ -808,6 +808,7 @@ int PKCS7_dataFinal(PKCS7 *p7, BIO *bio) 
                    goto err;



                if (!EVP_SignFinal(ctx_tmp, abuf, &abuflen, si->pkey)) {

                    OPENSSL_free(abuf);

                    PKCS7err(PKCS7_F_PKCS7_DATAFINAL, ERR_R_EVP_LIB);

                    goto err;

                }