memory leaking in PKCS7_dataDecode()

[Heyun Zheng]

Hi, 


I have found a memory leaking bug in the call: 

BIO *PKCS7_dataDecode(PKCS7 *p7, EVP_PKEY *pkey, BIO *in_bio, X509 *pcert)

The call returns rightaway after failed checking passed certificate without
clearing up. 
There is another place the coding returns without cleaning.
  1)
  
   if (ri == NULL) {
                        PKCS7err(PKCS7_F_PKCS7_DATADECODE,
                                 PKCS7_R_NO_RECIPIENT_MATCHES_CERTIFICATE);
                        return(NULL);
                }

2)
    
 if (EVP_CIPHER_asn1_to_param(evp_ctx,enc_alg->parameter) < 0)
                        return(NULL);


Thanks

Heyun Zheng

[EMAIL PROTECTED]



______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]