From: Norbert Pocs <norbertp@openssl.org>
Date: Tue, 8 Jul 2025 08:10:32 +0000 (+0200)
Subject: Address coverity issue 1655295
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=162089af7c6894cf65b70be1fc7e7091be482a71;p=thirdparty%2Fopenssl.git

Address coverity issue 1655295

Fixes: https://github.com/openssl/project/issues/1267

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27989)
---

diff --git a/providers/implementations/keymgmt/ml_kem_kmgmt.c.in b/providers/implementations/keymgmt/ml_kem_kmgmt.c.in
index 9a13d7a8ce5..9bab2f3b438 100644
--- a/providers/implementations/keymgmt/ml_kem_kmgmt.c.in
+++ b/providers/implementations/keymgmt/ml_kem_kmgmt.c.in
@@ -542,7 +542,8 @@ void *ml_kem_load(const void *reference, size_t reference_sz)
     }
 
  err:
-    OPENSSL_secure_clear_free(encoded_dk, key->vinfo->prvkey_bytes);
+    if (key != NULL && key->vinfo != NULL)
+        OPENSSL_secure_clear_free(encoded_dk, key->vinfo->prvkey_bytes);
     ossl_ml_kem_key_free(key);
     return NULL;
 }