Preliminary fix of memory leak in try_decode_PKCS12() - full fix is in #11733

[openssl.git] / crypto / store / loader_file.c

diff --git a/crypto/store/loader_file.c b/crypto/store/loader_file.c
index 9f6158ff793f4dfe7e87f4888ce3a4723bbc26d3..320c527a655c1bf1d8785ae31c477d2123adcf03 100644 (file)
--- a/crypto/store/loader_file.c
+++ b/crypto/store/loader_file.c
@@ -278,6 +278,7 @@ static OSSL_STORE_INFO *try_decode_PKCS12(const char *pem_name,
                         (void)sk_X509_shift(chain);
                     }
                 }
+                sk_X509_free(chain);
                 if (!ok) {
                     OSSL_STORE_INFO_free(osi_ca);
                     OSSL_STORE_INFO_free(osi_cert);