Commit bde21aa4f9 for strongswan.org

commit bde21aa4f987aeab6947654571d4d54e293fd3a8
Author: Tobias Brunner <tobias@strongswan.org>
Date:   Sun Jul 12 19:24:30 2026 +0200

    openssl: Fix memory leak when verifying plain RSA signatures with old BoringSSL versions

    Fixes: 21b586c61c95 ("openssl: Fixes for RSA with OpenSSL 3.0")

diff --git a/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c b/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c
index d259b22512..1607d75790 100644
--- a/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c
+++ b/src/libstrongswan/plugins/openssl/openssl_rsa_public_key.c
@@ -156,9 +156,9 @@ static bool verify_plain_signature(private_openssl_rsa_public_key_t *this,
 	{
 		valid = chunk_equals_const(data, chunk_create(buf, len));
 	}
-	free(buf);
 	EVP_PKEY_CTX_free(ctx);
 #endif
+	free(buf);
 	return valid;
 }