BUG/MINOR: jwt: fix possible memory leak in convert_ecdsa_sig() error path

The allocated ec_R and ec_S were not released in case one of the two
would fail to be allocated/created, and would cause a memory leak. Let's
add the missing BN_free(). This may be backported to 2.4.

diff --git a/src/jwt.c b/src/jwt.c
index 5359678afb553936d98e331928c1dc8b55b89099..8eb4f063ca9114b67a4a159c8c8feb23ab178527 100644 (file)
--- a/src/jwt.c
+++ b/src/jwt.c
@@ -324,6 +324,8 @@ static int convert_ecdsa_sig(const struct jwt_ctx *ctx, struct buffer *signature
        ec_S = BN_bin2bn((unsigned char *)(b_orig(signature) + bignum_len), bignum_len, NULL);
 
        if (!ec_R || !ec_S) {
+               BN_free(ec_R);
+               BN_free(ec_S);
                retval = JWT_VRFY_INVALID_TOKEN;
                goto end;
        }