From f6c006ea76304a52cf9212695525e1bcc6cf6c22 Mon Sep 17 00:00:00 2001
From: FdaSilvaYY <fdasilvayy@gmail.com>
Date: Sun, 3 Apr 2016 23:37:58 +0200
Subject: [PATCH] Fix a possible leak on NETSCAPE_SPKI_verify failure.

Reviewed-by: Stephen Henson <steve@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
---
 apps/ca.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/apps/ca.c b/apps/ca.c
index 85766cccbb..cc74c5bd25 100644
--- a/apps/ca.c
+++ b/apps/ca.c
@@ -2071,6 +2071,7 @@ static int certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey,
 
     j = NETSCAPE_SPKI_verify(spki, pktmp);
     if (j <= 0) {
+        EVP_PKEY_free(pktmp);
         BIO_printf(bio_err,
                    "signature verification failed on SPKAC public key\n");
         goto end;
-- 
2.25.1