release allocated mpis in _gnutls_x509_verify_algorithm().

diff --git a/lib/x509/verify.c b/lib/x509/verify.c
index 035409d123f3ad36bf1dd385b370294c82dd4357..599eff7e7135d6b8df8f295e341adadbd29d6a3a 100644 (file)
--- a/lib/x509/verify.c
+++ b/lib/x509/verify.c
@@ -766,7 +766,7 @@ _gnutls_x509_verify_algorithm (gnutls_mac_algorithm_t *hash,
   gnutls_datum_t decrypted;
   int issuer_params_size;
   int digest_size;
-  int ret;
+  int ret, i;
 
   switch (gnutls_x509_crt_get_pk_algorithm (issuer, NULL))
     {
@@ -786,6 +786,13 @@ _gnutls_x509_verify_algorithm (gnutls_mac_algorithm_t *hash,
       ret =
        _gnutls_pkcs1_rsa_decrypt (&decrypted, signature,
                                   issuer_params, issuer_params_size, 1);
+
+      /* release allocated mpis */
+      for (i = 0; i < issuer_params_size; i++)
+        {
+          _gnutls_mpi_release (&issuer_params[i]);
+        }
+
       if (ret < 0)
        {
           gnutls_assert ();