From: zhaozg <zhaozg@gmail.com>
Date: Tue, 24 Aug 2021 14:43:18 +0000 (+0800)
Subject: cms: fix memleaks in cms_env.c
X-Git-Tag: openssl-3.0.0~50
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=5327da81f0c70e35bdd8860af9af351313ca4ae2;p=thirdparty%2Fopenssl.git

cms: fix memleaks in cms_env.c

CLA: trivial

Reviewed-by: Paul Dale <pauli@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16403)

(cherry picked from commit 58e1e397c6774be11b903c0f88e85bd2b8c4206f)
---

diff --git a/crypto/cms/cms_env.c b/crypto/cms/cms_env.c
index 673880f6d9e..51a1d7df848 100644
--- a/crypto/cms/cms_env.c
+++ b/crypto/cms/cms_env.c
@@ -951,6 +951,7 @@ static int cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms,
     }
     ukeylen += outlen;
 
+    OPENSSL_clear_free(ec->key, ec->keylen);
     ec->key = ukey;
     ec->keylen = ukeylen;