From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Wed, 25 Jan 2023 19:58:13 +0000 (+0200)
Subject: lib-dcrypt: Use BN_secure_new in dcrypt_openssl_key_load_private_raw
X-Git-Tag: 2.4.0~3157
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a0b7e41ffacd5cc3b628e8844ab6ec949e345aa5;p=thirdparty%2Fdovecot%2Fcore.git

lib-dcrypt: Use BN_secure_new in dcrypt_openssl_key_load_private_raw
---

diff --git a/src/lib-dcrypt/dcrypt-openssl3.c b/src/lib-dcrypt/dcrypt-openssl3.c
index 461de7b885..51e7f8e067 100644
--- a/src/lib-dcrypt/dcrypt-openssl3.c
+++ b/src/lib-dcrypt/dcrypt-openssl3.c
@@ -3338,7 +3338,7 @@ dcrypt_openssl_key_load_private_raw(struct dcrypt_private_key **key_r,
 		ASN1_OBJECT_free(obj);
 
 		item = array_idx(keys, 1);
-		BIGNUM *point = BN_new();
+		BIGNUM *point = BN_secure_new();
 		if (BN_bin2bn(item->parameter, item->len, point) == NULL) {
 			BN_free(point);
 			return dcrypt_openssl_error(error_r);