From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Date: Thu, 15 Mar 2018 16:34:25 +0000 (+0000)
Subject: Fix fp leak on cert load in rlm_cipher
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=d03dabe859b625f2bc610775ce3935a51be7a814;p=thirdparty%2Ffreeradius-server.git

Fix fp leak on cert load in rlm_cipher
---

diff --git a/src/modules/rlm_cipher/rlm_cipher.c b/src/modules/rlm_cipher/rlm_cipher.c
index 155b8373e86..ec60e4c33dd 100644
--- a/src/modules/rlm_cipher/rlm_cipher.c
+++ b/src/modules/rlm_cipher/rlm_cipher.c
@@ -410,6 +410,8 @@ static int cipher_rsa_certificate_file_load(UNUSED TALLOC_CTX *ctx, void *out, C
 	 *	Load the PEM encoded X509 certificate
 	 */
 	cert = PEM_read_X509(fp, NULL, NULL, NULL);
+	fclose(fp);
+
 	if (!cert) {
 		tls_strerror_printf(NULL);
 		cf_log_perr(ci, "Error loading certificate file \"%s\"", filename);