From dd1abd4462e4e4fa84b8f8de2ec70375f9b0e191 Mon Sep 17 00:00:00 2001 From: Richard Levitte Date: Wed, 28 Sep 2016 23:39:18 +0200 Subject: If an engine comes up explicitely, it must also come down explicitely In apps/apps.c, one can set up an engine with setup_engine(). However, we freed the structural reference immediately, which means that for engines that don't already have a structural reference somewhere else (because it's a built in engine), we end up returning an invalid reference. Instead, the function release_engine() is added, and called at the end of the routines that call setup_engine(). Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/1643) --- apps/gendsa.c | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'apps/gendsa.c') diff --git a/apps/gendsa.c b/apps/gendsa.c index 272cbb17a5..c9563a74f7 100644 --- a/apps/gendsa.c +++ b/apps/gendsa.c @@ -46,6 +46,7 @@ const OPTIONS gendsa_options[] = { int gendsa_main(int argc, char **argv) { + ENGINE *e = NULL; BIO *out = NULL, *in = NULL; DSA *dsa = NULL; const EVP_CIPHER *enc = NULL; @@ -74,7 +75,7 @@ int gendsa_main(int argc, char **argv) passoutarg = opt_arg(); break; case OPT_ENGINE: - (void)setup_engine(opt_arg(), 0); + e = setup_engine(opt_arg(), 0); break; case OPT_RAND: inrand = opt_arg(); @@ -139,6 +140,7 @@ int gendsa_main(int argc, char **argv) BIO_free(in); BIO_free_all(out); DSA_free(dsa); + release_engine(e); OPENSSL_free(passout); return (ret); } -- cgit v1.2.3