From c6890d518edabf85766ac2fc81c0cc15a5776730 Mon Sep 17 00:00:00 2001
From: Eric Blankenhorn <eric@wolfssl.com>
Date: Fri, 29 Jun 2018 09:44:01 -0500
Subject: [PATCH] Fix resource leak in wolfSSL_BN_hex2bn

---
 src/ssl.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/ssl.c b/src/ssl.c
index 22117db4f..a45b2e1ac 100644
--- a/src/ssl.c
+++ b/src/ssl.c
@@ -22184,8 +22184,10 @@ int wolfSSL_BN_hex2bn(WOLFSSL_BIGNUM** bn, const char* str)
 
         if (*bn == NULL)
             WOLFSSL_MSG("BN new failed");
-        else if (wolfSSL_BN_bin2bn(decoded, decSz, *bn) == NULL)
+        else if (wolfSSL_BN_bin2bn(decoded, decSz, *bn) == NULL) {
             WOLFSSL_MSG("Bad bin2bn error");
+            wolfSSL_BN_free(*bn); /* Free new BN */
+        }
         else
             ret = WOLFSSL_SUCCESS;
     }