From 500086c078a8e5f70ada13816311615f891e7b76 Mon Sep 17 00:00:00 2001
From: qmuntal <qmuntaldiaz@microsoft.com>
Date: Tue, 26 Nov 2024 09:22:32 +0100
Subject: [PATCH] fix memory leak

---
 ecdh.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/ecdh.go b/ecdh.go
index 9f2b57b..0ea8fb5 100644
--- a/ecdh.go
+++ b/ecdh.go
@@ -221,12 +221,14 @@ func newECDHPkey3(nid C.int, bytes []byte, isPrivate bool) (C.GO_EVP_PKEY_PTR, e
 	defer C.go_openssl_EVP_PKEY_CTX_free(ctx)
 	if isPrivate {
 		if C.go_openssl_EVP_PKEY_private_check(ctx) != 1 {
+			C.go_openssl_EVP_PKEY_free(pkey)
 			// Match upstream error message.
 			return nil, errors.New("crypto/ecdh: invalid private key")
 		}
 	} else {
 		// Upstream Go does a partial check here, so do we.
 		if C.go_openssl_EVP_PKEY_public_check_quick(ctx) != 1 {
+			C.go_openssl_EVP_PKEY_free(pkey)
 			// Match upstream error message.
 			return nil, errors.New("crypto/ecdh: invalid public key")
 		}