Free eckey on siglen mismatch

diff --git a/lib/dns/opensslecdsa_link.c b/lib/dns/opensslecdsa_link.c
index 83b5b51cd78ca083ffcac9b5b9e6cfc259325dc3..84de63c450a0003a67e33c46761a0e422480d4c5 100644 (file)
--- a/lib/dns/opensslecdsa_link.c
+++ b/lib/dns/opensslecdsa_link.c
@@ -223,8 +223,9 @@ opensslecdsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
        else
                siglen = DNS_SIG_ECDSA384SIZE;
 
-       if (sig->length != siglen)
-               return (DST_R_VERIFYFAILURE);
+       if (sig->length != siglen) {
+               DST_RET(DST_R_VERIFYFAILURE);
+       }
 
        if (!EVP_DigestFinal_ex(evp_md_ctx, digest, &dgstlen))
                DST_RET (dst__openssl_toresult3(dctx->category,