diff --git a/msi.c b/msi.c
index 569a287..3ee30f3 100644
--- a/msi.c
+++ b/msi.c
@@ -830,6 +830,7 @@ static PKCS7 *msi_pkcs7_get_digital_signature(FILE_FORMAT_CTX *ctx, MSI_ENTRY *d
     p = OPENSSL_malloc((size_t)len);
     if (!msi_file_read(ctx->msi_ctx->msi, ds, 0, p, len)) {
         printf("DigitalSignature stream data error\n");
+        OPENSSL_free(p);
         return NULL;
     }
     blob = (u_char *)p;