ocsptool: eliminated memory leaks in verify-response option

diff --git a/src/ocsptool.c b/src/ocsptool.c
index b800c5e948c50c0676ff2cc91155f096eab3e668..4c942fc951d4efe8f6b352d9af0fa9949491be20 100644 (file)
--- a/src/ocsptool.c
+++ b/src/ocsptool.c
@@ -460,6 +460,10 @@ static void verify_response(gnutls_datum_t *nonce)
        signer = load_signer();
 
        v = _verify_response(&dat, nonce, signer);
+
+       gnutls_x509_crt_deinit(signer);
+       free(dat.data);
+
        if (v && !HAVE_OPT(IGNORE_ERRORS))
                exit(1);
 }