From 0a90fca2ce474eb15129a8baecbb4ed5d0d0d071 Mon Sep 17 00:00:00 2001 From: Tomas Mraz Date: Tue, 21 Jan 2025 14:42:28 +0100 Subject: [PATCH] eddsa_signverify_init(): Avoid memory leak on error Add missing WPACKET_cleanup() call. Fixes Coverity 1638693 Reviewed-by: Neil Horman Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/26500) (cherry picked from commit abbc4073145cb6b2ea221f3e34809e9aefece9ab) --- providers/implementations/signature/eddsa_sig.c | 1 + 1 file changed, 1 insertion(+) diff --git a/providers/implementations/signature/eddsa_sig.c b/providers/implementations/signature/eddsa_sig.c index 8594af39e14..84ca459706b 100644 --- a/providers/implementations/signature/eddsa_sig.c +++ b/providers/implementations/signature/eddsa_sig.c @@ -216,6 +216,7 @@ static int eddsa_digest_signverify_init(void *vpeddsactx, const char *mdname, /* Should never happen */ ERR_raise(ERR_LIB_PROV, ERR_R_INTERNAL_ERROR); ossl_ecx_key_free(edkey); + WPACKET_cleanup(&pkt); return 0; } if (ret && WPACKET_finish(&pkt)) { -- 2.47.2