summaryrefslogtreecommitdiff
path: root/apps/x509.c
diff options
context:
space:
mode:
authorRichard Levitte <levitte@openssl.org>2016-09-28 23:39:18 +0200
committerRichard Levitte <levitte@openssl.org>2016-10-19 17:44:08 +0200
commitdd1abd4462e4e4fa84b8f8de2ec70375f9b0e191 (patch)
tree66ed9bf5494cf999e57f754b5fa43ccd51ffc36e /apps/x509.c
parente972273194303e15f8dd7ce69dbcfa27cc024e9f (diff)
downloadopenssl-new-dd1abd4462e4e4fa84b8f8de2ec70375f9b0e191.tar.gz
If an engine comes up explicitely, it must also come down explicitely
In apps/apps.c, one can set up an engine with setup_engine(). However, we freed the structural reference immediately, which means that for engines that don't already have a structural reference somewhere else (because it's a built in engine), we end up returning an invalid reference. Instead, the function release_engine() is added, and called at the end of the routines that call setup_engine(). Reviewed-by: Rich Salz <rsalz@openssl.org> (Merged from https://github.com/openssl/openssl/pull/1643)
Diffstat (limited to 'apps/x509.c')
-rw-r--r--apps/x509.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/apps/x509.c b/apps/x509.c
index 78f2c027a3..182cfb055d 100644
--- a/apps/x509.c
+++ b/apps/x509.c
@@ -893,6 +893,7 @@ int x509_main(int argc, char **argv)
sk_ASN1_OBJECT_pop_free(trust, ASN1_OBJECT_free);
sk_ASN1_OBJECT_pop_free(reject, ASN1_OBJECT_free);
ASN1_OBJECT_free(objtmp);
+ release_engine(e);
OPENSSL_free(passin);
return (ret);
}