From: Jakub Zelenka <jakub.openssl@gmail.com>
Date: Fri, 13 Dec 2024 12:47:25 +0000 (+0100)
Subject: Fix originator cert leak in cms app
X-Git-Tag: openssl-3.3.3~62
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=e2c6c6aabd69ce70d2a29ebc37e3cdcef27ea993;p=thirdparty%2Fopenssl.git

Fix originator cert leak in cms app

Reviewed-by: Hugo Landau <hlandau@devever.net>
Reviewed-by: David von Oheimb <david.von.oheimb@siemens.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26014)

(cherry picked from commit 24dd635efff48a24daf1e38a256550253225a28e)
---

diff --git a/apps/cms.c b/apps/cms.c
index ac5f78ecc20..75a7260362a 100644
--- a/apps/cms.c
+++ b/apps/cms.c
@@ -1294,6 +1294,7 @@ int cms_main(int argc, char **argv)
     X509_free(cert);
     X509_free(recip);
     X509_free(signer);
+    X509_free(originator);
     EVP_PKEY_free(key);
     EVP_CIPHER_free(cipher);
     EVP_CIPHER_free(wrap_cipher);