From: tb <tb@openbsd.org>
Date: Sun, 23 Jun 2024 07:50:52 +0000 (+0000)
Subject: openssl ca: avoid double free for spkac files without default section
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=4fffae4795a0008457f50706e9f95ce941a5c49f;p=openbsd

openssl ca: avoid double free for spkac files without default section

ok jsing
---

diff --git a/usr.bin/openssl/ca.c b/usr.bin/openssl/ca.c
index 6fedd22c95b..c0e011e7ad8 100644
--- a/usr.bin/openssl/ca.c
+++ b/usr.bin/openssl/ca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ca.c,v 1.58 2024/02/04 13:08:29 tb Exp $ */
+/* $OpenBSD: ca.c,v 1.59 2024/06/23 07:50:52 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2330,7 +2330,6 @@ certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
 	if (sk_CONF_VALUE_num(sk) == 0) {
 		BIO_printf(bio_err, "no name/value pairs found in %s\n",
 		    infile);
-		CONF_free(parms);
 		goto err;
 	}
 	/*