Free ctx on invalid siglen

diff --git a/lib/dns/openssleddsa_link.c b/lib/dns/openssleddsa_link.c
index 8b115ec283f033acedccfc941b6f403d502ad0f5..4720c58651fe003bcde7ccb166315fe091bcff38 100644 (file)
--- a/lib/dns/openssleddsa_link.c
+++ b/lib/dns/openssleddsa_link.c
@@ -324,8 +324,9 @@ openssleddsa_verify(dst_context_t *dctx, const isc_region_t *sig) {
        else
                siglen = DNS_SIG_ED448SIZE;
 
-       if (sig->length != siglen)
-               return (DST_R_VERIFYFAILURE);
+       if (sig->length != siglen) {
+               DST_RET(DST_R_VERIFYFAILURE);
+       }
 
        isc_buffer_usedregion(buf, &tbsreg);