From a2b51ca6acae9e1c819e0d2e4aa1584b675c4cb7 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Mon, 26 Sep 2022 11:51:05 +1000
Subject: [PATCH] Free 'rsa' if 'e' is NULL in opensslrsa_verify2

---
 lib/dns/opensslrsa_link.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/dns/opensslrsa_link.c b/lib/dns/opensslrsa_link.c
index 4d8c29ea89..3c72441727 100644
--- a/lib/dns/opensslrsa_link.c
+++ b/lib/dns/opensslrsa_link.c
@@ -202,6 +202,7 @@ opensslrsa_verify2(dst_context_t *dctx, int maxbits, const isc_region_t *sig) {
 	}
 	RSA_get0_key(rsa, NULL, &e, NULL);
 	if (e == NULL) {
+		RSA_free(rsa);
 		return (dst__openssl_toresult(DST_R_VERIFYFAILURE));
 	}
 	bits = BN_num_bits(e);