From a0b7e41ffacd5cc3b628e8844ab6ec949e345aa5 Mon Sep 17 00:00:00 2001
From: Aki Tuomi <aki.tuomi@open-xchange.com>
Date: Wed, 25 Jan 2023 21:58:13 +0200
Subject: [PATCH] lib-dcrypt: Use BN_secure_new in
 dcrypt_openssl_key_load_private_raw

---
 src/lib-dcrypt/dcrypt-openssl3.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib-dcrypt/dcrypt-openssl3.c b/src/lib-dcrypt/dcrypt-openssl3.c
index 461de7b885..51e7f8e067 100644
--- a/src/lib-dcrypt/dcrypt-openssl3.c
+++ b/src/lib-dcrypt/dcrypt-openssl3.c
@@ -3338,7 +3338,7 @@ dcrypt_openssl_key_load_private_raw(struct dcrypt_private_key **key_r,
 		ASN1_OBJECT_free(obj);
 
 		item = array_idx(keys, 1);
-		BIGNUM *point = BN_new();
+		BIGNUM *point = BN_secure_new();
 		if (BN_bin2bn(item->parameter, item->len, point) == NULL) {
 			BN_free(point);
 			return dcrypt_openssl_error(error_r);
-- 
2.47.3