openssl: fix a potential memory leak of params.cert

x2018 · bagder · commit 22b8a6430dca · 2025-11-17T14:43:34.000+01:00
Closes curl#19560
diff --git a/lib/vtls/openssl.c b/lib/vtls/openssl.c
@@ -1214,6 +1214,7 @@ static int engineload(struct Curl_easy *data,
       failf(data, "unable to set client certificate [%s]",
             ossl_strerror(ERR_get_error(), error_buffer,
                           sizeof(error_buffer)));
+      X509_free(params.cert);
       return 0;
     }
     X509_free(params.cert); /* we do not need the handle any more... */

Original file line number	Diff line number	Diff line change
`@@ -1214,6 +1214,7 @@ static int engineload(struct Curl_easy *data,`
`1214`	`1214`	`failf(data, "unable to set client certificate [%s]",`
`1215`	`1215`	`ossl_strerror(ERR_get_error(), error_buffer,`
`1216`	`1216`	`sizeof(error_buffer)));`
	`1217`	`+ X509_free(params.cert);`
`1217`	`1218`	`return 0;`
`1218`	`1219`	`}`
`1219`	`1220`	`X509_free(params.cert); /* we do not need the handle any more... */`