efi_x509: fix an error handling in is_immediate_ca()

X509cert is allocated when converting X509ca, so we should free it in case d2i_X509 fails to convert X509ca. Signed-off-by: Gary Lin <[email protected]>
lcp · Jun 28, 2021 · b3c6da7 · b3c6da7
1 parent 3e7bc30
commit b3c6da7
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/efi_x509.c b/src/efi_x509.c
@@ -141,7 +141,7 @@ is_immediate_ca (const uint8_t *cert, const uint32_t cert_size,
 
 	X509ca = d2i_X509 (NULL, &ca_cert, ca_cert_size);
 	if (X509ca == NULL)
-		return 0;
+		goto err;
 
 	cert_store = X509_STORE_new ();
 	if (cert_store == NULL)