From: Neil Horman <nhorman@openssl.org>
Date: Fri, 26 Jun 2026 15:13:21 +0000 (-0400)
Subject: use evp_kem_free in evp_kem_from_algorithm
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=8225d82f04cf49412c5779ee19c3d5d812e1f265;p=thirdparty%2Fopenssl.git

use evp_kem_free in evp_kem_from_algorithm

evp_kem_from_algorithm, in its error path frees the allocated kem
with EVP_KEM_free, but thats a no-op now, and we actually want to
free it to avoid leaks, so we should use evp_kem_free (the internal
function that acutally does free the alg) instead.

Fixes https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1695456

Reviewed-by: Saša Nedvědický <sashan@openssl.org>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
MergeDate: Wed Jul  1 15:32:16 2026
(Merged from https://github.com/openssl/openssl/pull/31748)
---

diff --git a/crypto/evp/kem.c b/crypto/evp/kem.c
index 48de927ce43..ec83236ab4c 100644
--- a/crypto/evp/kem.c
+++ b/crypto/evp/kem.c
@@ -442,7 +442,7 @@ static void *evp_kem_from_algorithm(int name_id, const OSSL_ALGORITHM *algodef,
 
     return kem;
 err:
-    EVP_KEM_free(kem);
+    evp_kem_free(kem);
     return NULL;
 }