From 9d152b847745c7289c861d604a0c455ff9d0660b Mon Sep 17 00:00:00 2001
From: olszomal <Malgorzata.Olszowka@stunnel.org>
Date: Thu, 15 Feb 2024 13:31:05 +0100
Subject: [PATCH] Fix url resource leak, CID 1583652, 1583653

---
 osslsigncode.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/osslsigncode.c b/osslsigncode.c
index a78f650..895806c 100644
--- a/osslsigncode.c
+++ b/osslsigncode.c
@@ -1799,8 +1799,8 @@ static int verify_timestamp(FILE_FORMAT_CTX *ctx, PKCS7 *p7, CMS_ContentInfo *ti
         } else {
             printf("TSA's CRL distribution point: %s\n", url);
             crl = x509_crl_get(url);
-            OPENSSL_free(url);
         }
+        OPENSSL_free(url);
         if (!crl && !ctx->options->tsa_crlfile) {
             printf("Use the \"-TSA-CRLfile\" option to add one or more Time-Stamp Authority CRLs in PEM format.\n");
         }
@@ -1924,8 +1924,8 @@ static int verify_authenticode(FILE_FORMAT_CTX *ctx, PKCS7 *p7, time_t time, X50
         } else {
             printf("CRL distribution point: %s\n", url);
             crl = x509_crl_get(url);
-            OPENSSL_free(url);
         }
+        OPENSSL_free(url);
         if (!crl && !ctx->options->crlfile) {
             printf("Use the \"-CRLfile\" option to add one or more CRLs in PEM format.\n");
             goto out;