Properly clone PKCS#7 attributes passed to builder

diff --git a/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c b/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c
index 1fffdc3a5368a4c22b6a42f180b71a09287594d3..4c963ab823d164e4d4c65b8f20901a07f80f39b8 100644 (file)
--- a/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c
+++ b/src/libstrongswan/plugins/pkcs7/pkcs7_signed_data.c
@@ -642,7 +642,7 @@ pkcs7_t *pkcs7_signed_data_gen(container_type_t type, va_list args)
                        case BUILD_PKCS7_ATTRIBUTE:
                                oid = va_arg(args, int);
                                value = va_arg(args, chunk_t);
-                               pkcs9->add_attribute(pkcs9, oid, value);
+                               pkcs9->add_attribute(pkcs9, oid, chunk_clone(value));
                                continue;
                        case BUILD_END:
                                break;