Commit 2036e99743 for openssl.org

commit 2036e997430f4bee75d3a60301f7ecc8c2e66198
Author: openssl-machine <openssl-machine@openssl.org>
Date:   Mon Mar 23 09:09:03 2026 +0100

    CMS_verify(): Fix leak of tmpin in an error path

    Reviewed-by: Eugene Syromiatnikov <esyr@openssl.org>
    Reviewed-by: Paul Dale <paul.dale@oracle.com>
    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    MergeDate: Fri Mar 27 16:43:44 2026
    (Merged from https://github.com/openssl/openssl/pull/30535)

diff --git a/crypto/cms/cms_smime.c b/crypto/cms/cms_smime.c
index 6ddcec6157..659c033482 100644
--- a/crypto/cms/cms_smime.c
+++ b/crypto/cms/cms_smime.c
@@ -474,8 +474,10 @@ err:
     } else {
         if (dcont && (tmpin == dcont))
             do_free_upto(cmsbio, dcont);
-        else
+        else if (cmsbio != NULL)
             BIO_free_all(cmsbio);
+        else
+            BIO_free(tmpin);
     }

     if (out != tmpout)