From e43a13c807e42688c72c4f3d001112bf0a110464 Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Mon, 8 Jun 2015 09:29:56 +0100 Subject: [PATCH] Fix leak in HMAC error path In the event of an error in the HMAC function, leaks can occur because the HMAC_CTX does not get cleaned up. Thanks to the BoringSSL project for reporting this issue. Reviewed-by: Richard Levitte --- crypto/hmac/hmac.c | 1 + 1 file changed, 1 insertion(+) diff --git a/crypto/hmac/hmac.c b/crypto/hmac/hmac.c index 572393e2c7..d50fabb7c1 100644 --- a/crypto/hmac/hmac.c +++ b/crypto/hmac/hmac.c @@ -219,6 +219,7 @@ unsigned char *HMAC(const EVP_MD *evp_md, const void *key, int key_len, HMAC_CTX_cleanup(&c); return md; err: + HMAC_CTX_cleanup(&c); return NULL; } -- 2.34.1