From bde21aa4f987aeab6947654571d4d54e293fd3a8 Mon Sep 17 00:00:00 2001 From: Tobias Brunner Date: Sun, 12 Jul 2026 19:24:30 +0200 Subject: [PATCH] openssl: Fix memory leak when verifying plain RSA signatures with old BoringSSL versions Fixes: 21b586c61c95 ("openssl: Fixes for RSA with OpenSSL 3.0") --- src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c b/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c index d259b2251..1607d7579 100644 --- a/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c +++ b/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c @@ -156,9 +156,9 @@ static bool verify_plain_signature(private_openssl_rsa_public_key_t *this, { valid = chunk_equals_const(data, chunk_create(buf, len)); } - free(buf); EVP_PKEY_CTX_free(ctx); #endif + free(buf); return valid; }