1 files changed, 7 insertions, 2 deletions

diff --git a/src/lib/libssl/d1_lib.c b/src/lib/libssl/d1_lib.c
index 69db8a0df4..7f6dd1d1c5 100644
--- a/src/lib/libssl/d1_lib.c
+++ b/src/lib/libssl/d1_lib.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: d1_lib.c,v 1.65 2024/07/23 14:40:53 jsing Exp $ */
+/* $OpenBSD: d1_lib.c,v 1.67 2026/08/30 12:23:16 kenjiro Exp $ */
 /*
  * DTLS implementation written by Nagendra Modadugu
  * (nagendra@cs.stanford.edu) for the OpenSSL project 2005.
@@ -179,6 +179,8 @@ dtls1_free(SSL *s)
         pqueue_free(s->d1->sent_messages);
         pqueue_free(s->d1->buffered_app_data.q);
 
+        dtls12_handshake_msg_free(s->d1->hs_msg);
+
         freezero(s->d1, sizeof(*s->d1));
         s->d1 = NULL;
 }
@@ -199,6 +201,9 @@ dtls1_clear(SSL *s)
                 buffered_app_data = s->d1->buffered_app_data.q;
                 mtu = s->d1->mtu;
 
+                dtls12_handshake_msg_free(s->d1->hs_msg);
+                s->d1->hs_msg = NULL;
+
                 dtls1_clear_queues(s);
 
                 memset(s->d1, 0, sizeof(*s->d1));
@@ -228,7 +233,7 @@ dtls1_clear(SSL *s)
 long
 dtls1_ctrl(SSL *s, int cmd, long larg, void *parg)
 {
-        int ret = 0;
+        long ret = 0;
 
         switch (cmd) {
         case DTLS_CTRL_GET_TIMEOUT: