Free an ASN1_OBJECT in an error path
authorMatt Caswell <matt@openssl.org>
Wed, 27 Apr 2016 13:17:33 +0000 (14:17 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 28 Apr 2016 12:13:09 +0000 (13:13 +0100)
The r2i_certpol() function allocates an ASN1_OBJECT but can fail to free
it in an error path.

Reviewed-by: Richard Levitte <levitte@openssl.org>
crypto/x509v3/v3_cpols.c

index b4dd3ad9feb17f9322750bab80387577ec194417..f1db67f24e6ef327bd0ed23d2a3b6fd6aff20d27 100644 (file)
@@ -188,6 +188,7 @@ static STACK_OF(POLICYINFO) *r2i_certpol(X509V3_EXT_METHOD *method,
             pol = POLICYINFO_new();
             if (pol == NULL) {
                 X509V3err(X509V3_F_R2I_CERTPOL, ERR_R_MALLOC_FAILURE);
+                ASN1_OBJECT_free(pobj);
                 goto err;
             }
             pol->policyid = pobj;