Use the data, *then* free it. It works so much better.

svn:r2837

diff --git a/src/or/connection_or.c b/src/or/connection_or.c
index 1061410be78d82c89dd2155572896aee94d7049d..a5aaeac29e5e0a8cc71ce0a68871c4eb364b5c8d 100644 (file)
--- a/src/or/connection_or.c
+++ b/src/or/connection_or.c
@@ -364,13 +364,13 @@ connection_tls_finish_handshake(connection_t *conn) {
   }
   log_fn(LOG_DEBUG,"The router's cert is valid.");
   crypto_pk_get_digest(identity_rcvd, digest_rcvd);
-  crypto_free_pk_env(identity_rcvd);
 
   if (crypto_pk_cmp_keys(get_identity_key(), identity_rcvd)<0) {
     conn->circ_id_type = CIRC_ID_TYPE_LOWER;
   } else {
     conn->circ_id_type = CIRC_ID_TYPE_HIGHER;
   }
+  crypto_free_pk_env(identity_rcvd);
 
   router = router_get_by_nickname(nickname);
   if(router && /* we know this nickname */