deinitialize the temporary spki data

diff --git a/lib/pkcs11.c b/lib/pkcs11.c
index 45669889da5c3e2b1e2b078d5f227a44702d7a67..cec9e93813aaefc3538f0a37a5fd96bee62428fb 100644 (file)
--- a/lib/pkcs11.c
+++ b/lib/pkcs11.c
@@ -3321,6 +3321,7 @@ find_cert_cb(struct pkcs11_session_info *sinfo,
                                        rv = pkcs11_get_attribute_avalue(sinfo->module, sinfo->pks, obj, CKA_PUBLIC_KEY_INFO, &spki);
                                        if (rv == CKR_OK) {
                                                ret = pkcs11_override_cert_exts(sinfo, &spki, &data);
+                                               gnutls_free(spki.data);
                                                if (ret < 0) {
                                                        gnutls_assert();
                                                        goto cleanup;