Commit 8225d82f04 for openssl.org
commit 8225d82f04cf49412c5779ee19c3d5d812e1f265
Author: Neil Horman <nhorman@openssl.org>
Date: Fri Jun 26 11:13:21 2026 -0400
use evp_kem_free in evp_kem_from_algorithm
evp_kem_from_algorithm, in its error path frees the allocated kem
with EVP_KEM_free, but thats a no-op now, and we actually want to
free it to avoid leaks, so we should use evp_kem_free (the internal
function that acutally does free the alg) instead.
Fixes https://scan5.scan.coverity.com/#/project-view/60762/10222?selectedIssue=1695456
Reviewed-by: Saša NedvÄ›dický <sashan@openssl.org>
Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
Reviewed-by: Norbert Pocs <norbertp@openssl.org>
MergeDate: Wed Jul 1 15:32:16 2026
(Merged from https://github.com/openssl/openssl/pull/31748)
diff --git a/crypto/evp/kem.c b/crypto/evp/kem.c
index 48de927ce4..ec83236ab4 100644
--- a/crypto/evp/kem.c
+++ b/crypto/evp/kem.c
@@ -442,7 +442,7 @@ static void *evp_kem_from_algorithm(int name_id, const OSSL_ALGORITHM *algodef,
return kem;
err:
- EVP_KEM_free(kem);
+ evp_kem_free(kem);
return NULL;
}