[openssl] OpenSSL_1_1_1-stable update

[tomas at openssl.org]

The branch OpenSSL_1_1_1-stable has been updated
       via  58e1e397c6774be11b903c0f88e85bd2b8c4206f (commit)
      from  96ac8f13f4d0ee96baf5724d9f96c44c34b8606c (commit)


- Log -----------------------------------------------------------------
commit 58e1e397c6774be11b903c0f88e85bd2b8c4206f
Author: zhaozg <zhaozg at gmail.com>
Date:   Tue Aug 24 22:43:18 2021 +0800

    cms: fix memleaks in cms_env.c
    
    CLA: trivial
    
    Reviewed-by: Paul Dale <pauli at openssl.org>
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/16403)

-----------------------------------------------------------------------

Summary of changes:
 crypto/cms/cms_env.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/cms/cms_env.c b/crypto/cms/cms_env.c
index 04940146fd..fe078f1a7f 100644
--- a/crypto/cms/cms_env.c
+++ b/crypto/cms/cms_env.c
@@ -737,6 +737,7 @@ static int cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms,
         goto err;
     }
 
+    OPENSSL_clear_free(ec->key, ec->keylen);
     ec->key = ukey;
     ec->keylen = ukeylen;