[openssl] master update

[tomas at openssl.org]

The branch master has been updated
       via  5327da81f0c70e35bdd8860af9af351313ca4ae2 (commit)
      from  597d24e2ab395991cb2048529714ea534c173591 (commit)


- Log -----------------------------------------------------------------
commit 5327da81f0c70e35bdd8860af9af351313ca4ae2
Author: zhaozg <zhaozg at gmail.com>
Date:   Tue Aug 24 22:43:18 2021 +0800

    cms: fix memleaks in cms_env.c
    
    CLA: trivial
    
    Reviewed-by: Paul Dale <pauli at openssl.org>
    Reviewed-by: Tomas Mraz <tomas at openssl.org>
    (Merged from https://github.com/openssl/openssl/pull/16403)
    
    (cherry picked from commit 58e1e397c6774be11b903c0f88e85bd2b8c4206f)

-----------------------------------------------------------------------

Summary of changes:
 crypto/cms/cms_env.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/crypto/cms/cms_env.c b/crypto/cms/cms_env.c
index 673880f6d9..51a1d7df84 100644
--- a/crypto/cms/cms_env.c
+++ b/crypto/cms/cms_env.c
@@ -951,6 +951,7 @@ static int cms_RecipientInfo_kekri_decrypt(CMS_ContentInfo *cms,
     }
     ukeylen += outlen;
 
+    OPENSSL_clear_free(ec->key, ec->keylen);
     ec->key = ukey;
     ec->keylen = ukeylen;