Commit e43a13c8 authored Jun 08, 2015 by Matt Caswell

Fix leak in HMAC error path



In the event of an error in the HMAC function, leaks can occur because the
HMAC_CTX does not get cleaned up.

Thanks to the BoringSSL project for reporting this issue.

Reviewed-by: Richard Levitte <levitte@openssl.org>

parent 68886be7

crypto/hmac/hmac.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -219,6 +219,7 @@ unsigned char HMAC(const EVP_MD evp_md, const void *key, int key_len,
		HMAC_CTX_cleanup(&c);
		return md;
		err:
		HMAC_CTX_cleanup(&c);
		return NULL;
		}