From: Miroslav Lichvar <mlichvar@redhat.com>
Date: Thu, 2 Sep 2021 07:56:58 +0000 (+0200)
Subject: siv: deinit gnutls on unsupported SIV
X-Git-Tag: 4.2-pre1~64
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=70a0f18d52b1a4a8964cdbb64a6c04e2a9a5bd72;p=thirdparty%2Fchrony.git

siv: deinit gnutls on unsupported SIV
---

diff --git a/siv_gnutls.c b/siv_gnutls.c
index 77942ece..437f7151 100644
--- a/siv_gnutls.c
+++ b/siv_gnutls.c
@@ -102,8 +102,11 @@ SIV_CreateInstance(SIV_Algorithm algorithm)
     init_gnutls();
 
   /* Check if the cipher is actually supported */
-  if (gnutls_cipher_get_tag_size(calgo) == 0)
+  if (gnutls_cipher_get_tag_size(calgo) == 0) {
+    if (instance_counter == 0)
+      deinit_gnutls();
     return NULL;
+  }
 
   instance = MallocNew(struct SIV_Instance_Record);
   instance->algorithm = calgo;