cms_SignerInfo_content_sign: free sig on failure path

Signed-off-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>

diff --git a/crypto/cms/cms_sd.c b/crypto/cms/cms_sd.c
index ac5103abf7ccc04b61613697102730dfe440cdd6..681ee7e34803eff8a5bc7ca52e478d85852478c8 100644 (file)
--- a/crypto/cms/cms_sd.c
+++ b/crypto/cms/cms_sd.c
@@ -680,7 +680,10 @@ static int cms_SignerInfo_content_sign(CMS_ContentInfo *cms,
                        goto err;
                        }
                if (EVP_PKEY_sign(pctx, sig, &siglen, md, mdlen) <= 0)
+                       {
+                       OPENSSL_free(sig);
                        goto err;
+                       }
                ASN1_STRING_set0(si->signature, sig, siglen);
                }
        else