[openssl] master update

[Dr. Paul Dale]

The branch master has been updated
       via  bbc3c22c0e2b3b4b6f069712dc8322a48506b775 (commit)
      from  b394809c87bedddc6223e14098307f154224790f (commit)


- Log -----------------------------------------------------------------
commit bbc3c22c0e2b3b4b6f069712dc8322a48506b775
Author: Pauli <paul.dale at oracle.com>
Date:   Mon May 25 07:43:45 2020 +1000

    Coverity 1463830: Resource leaks (RESOURCE_LEAK)
    
    Reviewed-by: Tim Hudson <tjh at openssl.org>
    Reviewed-by: Bernd Edlinger <bernd.edlinger at hotmail.de>
    (Merged from https://github.com/openssl/openssl/pull/11941)

-----------------------------------------------------------------------

Summary of changes:
 crypto/x509/x509_vfy.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/x509/x509_vfy.c b/crypto/x509/x509_vfy.c
index 75c5c0e201..1e881ccfcd 100644
--- a/crypto/x509/x509_vfy.c
+++ b/crypto/x509/x509_vfy.c
@@ -398,6 +398,7 @@ static STACK_OF(X509) *lookup_certs_sk(X509_STORE_CTX *ctx,
         x = sk_X509_value(ctx->other_ctx, i);
         if (X509_NAME_cmp(nm, X509_get_subject_name(x)) == 0) {
             if (!X509_up_ref(x)) {
+                sk_X509_pop_free(sk, X509_free);
                 X509err(X509_F_LOOKUP_CERTS_SK, ERR_R_INTERNAL_ERROR);
                 ctx->error = X509_V_ERR_UNSPECIFIED;
                 return NULL;