From a6cea568b127c03f3420f698c0647e80bde07008 Mon Sep 17 00:00:00 2001
From: beck <>
Date: Mon, 14 Sep 2020 07:46:01 +0000
Subject: Fix double free - review moved the pop_free of roots to
 x509_verify_ctx_free so we don't need to pop free the roots separately

---
 src/lib/libcrypto/x509/x509_vfy.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/src/lib/libcrypto/x509/x509_vfy.c b/src/lib/libcrypto/x509/x509_vfy.c
index b1cc9b5a00..f076a1dc5c 100644
--- a/src/lib/libcrypto/x509/x509_vfy.c
+++ b/src/lib/libcrypto/x509/x509_vfy.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: x509_vfy.c,v 1.75 2020/09/13 15:06:17 beck Exp $ */
+/* $OpenBSD: x509_vfy.c,v 1.76 2020/09/14 07:46:01 beck Exp $ */
 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  * All rights reserved.
  *
@@ -682,7 +682,6 @@ X509_verify_cert(X509_STORE_CTX *ctx)
 		chain_count = x509_verify(vctx, NULL, NULL);
 	}
 
-	sk_X509_pop_free(roots, X509_free);
 	x509_verify_ctx_free(vctx);
 
 	/* if we succeed we have a chain in ctx->chain */
-- 
cgit v1.2.3-55-g6feb