From 6f221ff75ceca49c260a0e0d2d46dd956126b357 Mon Sep 17 00:00:00 2001
From: David Garske <david@wolfssl.com>
Date: Wed, 23 May 2018 16:21:49 -0700
Subject: [PATCH] Fix possible leak in PKCS for failure case with small stack
 enabled.

---
 wolfcrypt/src/pkcs7.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/wolfcrypt/src/pkcs7.c b/wolfcrypt/src/pkcs7.c
index 2da4c5e15..4f7e6bf0c 100644
--- a/wolfcrypt/src/pkcs7.c
+++ b/wolfcrypt/src/pkcs7.c
@@ -4186,6 +4186,9 @@ static int wc_PKCS7_DecodeKari(PKCS7* pkcs7, byte* pkiMsg, word32 pkiMsgSz,
                                       pkcs7->privateKeySz);
     if (ret != 0) {
         wc_PKCS7_KariFree(kari);
+        #ifdef WOLFSSL_SMALL_STACK
+            XFREE(encryptedKey, NULL, DYNAMIC_TYPE_PKCS7);
+        #endif
         return ret;
     }