From 4fffae4795a0008457f50706e9f95ce941a5c49f Mon Sep 17 00:00:00 2001
From: tb <tb@openbsd.org>
Date: Sun, 23 Jun 2024 07:50:52 +0000
Subject: [PATCH] openssl ca: avoid double free for spkac files without default
 section

ok jsing
---
 usr.bin/openssl/ca.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/usr.bin/openssl/ca.c b/usr.bin/openssl/ca.c
index 6fedd22c95b..c0e011e7ad8 100644
--- a/usr.bin/openssl/ca.c
+++ b/usr.bin/openssl/ca.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ca.c,v 1.58 2024/02/04 13:08:29 tb Exp $ */
+/* $OpenBSD: ca.c,v 1.59 2024/06/23 07:50:52 tb Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -2330,7 +2330,6 @@ certify_spkac(X509 **xret, char *infile, EVP_PKEY *pkey, X509 *x509,
 	if (sk_CONF_VALUE_num(sk) == 0) {
 		BIO_printf(bio_err, "no name/value pairs found in %s\n",
 		    infile);
-		CONF_free(parms);
 		goto err;
 	}
 	/*
-- 
2.20.1