Merge pull request #868 from sipa/fix_650

Fix #650: CKey::SetSecret BIGNUM leak

1 files changed, 4 insertions, 1 deletions

diff --git a/src/key.h b/src/key.h
index 9e92897e26..a57143b7d9 100644
--- a/src/key.h
+++ b/src/key.h
@@ -141,10 +141,13 @@ public:
         if (vchSecret.size() != 32)
             throw key_error("CKey::SetSecret() : secret must be 32 bytes");
         BIGNUM *bn = BN_bin2bn(&vchSecret[0],32,BN_new());
-        if (bn == NULL) 
+        if (bn == NULL)
             throw key_error("CKey::SetSecret() : BN_bin2bn failed");
         if (!EC_KEY_regenerate_key(pkey,bn))
+        {
+            BN_clear_free(bn);
             throw key_error("CKey::SetSecret() : EC_KEY_regenerate_key failed");
+        }
         BN_clear_free(bn);
         fSet = true;
         if (fCompressed || fCompressedPubKey)