From 36f7ed5040d27a5446d66649986cb3595161f685 Mon Sep 17 00:00:00 2001
From: Jonas Maebe <jonas.maebe@elis.ugent.be>
Date: Sun, 8 Dec 2013 17:16:57 +0100
Subject: [PATCH] cms_SignerInfo_content_sign: free sig on failure path

Signed-off-by: Kurt Roeckx <kurt@openssl.org>
Reviewed-by: Rich Salz <rsalz@openssl.org>
---
 crypto/cms/cms_sd.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/crypto/cms/cms_sd.c b/crypto/cms/cms_sd.c
index ac5103abf7..681ee7e348 100644
--- a/crypto/cms/cms_sd.c
+++ b/crypto/cms/cms_sd.c
@@ -680,7 +680,10 @@ static int cms_SignerInfo_content_sign(CMS_ContentInfo *cms,
 			goto err;
 			}
 		if (EVP_PKEY_sign(pctx, sig, &siglen, md, mdlen) <= 0)
+			{
+			OPENSSL_free(sig);
 			goto err;
+			}
 		ASN1_STRING_set0(si->signature, sig, siglen);
 		}
 	else