From 3ddf44ea5a2c1c8c55f4f4072a611791c79d4e7c Mon Sep 17 00:00:00 2001
From: John Baldwin <jhb@FreeBSD.org>
Date: Thu, 7 Jan 2021 14:09:41 -0800
Subject: Close /dev/crypto file descriptor after CRIOGET ioctl().

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Ben Kaduk <kaduk@mit.edu>
(Merged from https://github.com/openssl/openssl/pull/13807)
---
 engines/e_devcrypto.c | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'engines')

diff --git a/engines/e_devcrypto.c b/engines/e_devcrypto.c
index d549edfd29..e1c4372f72 100644
--- a/engines/e_devcrypto.c
+++ b/engines/e_devcrypto.c
@@ -1236,9 +1236,11 @@ static int open_devcrypto(void)
 #ifdef CRIOGET
     if (ioctl(fd, CRIOGET, &cfd) < 0) {
         fprintf(stderr, "Could not create crypto fd: %s\n", strerror(errno));
+        close(fd);
         cfd = -1;
         return 0;
     }
+    close(fd);
 #else
     cfd = fd;
 #endif
-- 
cgit v1.2.3