From 62087eed220356f373f765b86ef63470b3ac2228 Mon Sep 17 00:00:00 2001
From: Paul Bakker <p.j.bakker@polarssl.org>
Date: Fri, 4 Oct 2013 10:56:03 +0200
Subject: [PATCH] Fixed memory leak in rsa.c introduced in 43f9799

---
 ChangeLog     | 4 ++++
 library/rsa.c | 1 +
 2 files changed, 5 insertions(+)

diff --git a/ChangeLog b/ChangeLog
index 80208e5ced..4ea71d0bd6 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,5 +1,9 @@
 PolarSSL ChangeLog
 
+= Branch 1.2
+Bugfix
+   * Fixed memory leak in RSA as a result of introduction of blinding
+
 = Version 1.2.9 released 2013-10-01
 Changes
    * x509_verify() now case insensitive for cn (RFC 6125 6.4)
diff --git a/library/rsa.c b/library/rsa.c
index 1ef97f8661..9e47d5d276 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1347,6 +1347,7 @@ int rsa_pkcs1_verify( rsa_context *ctx,
  */
 void rsa_free( rsa_context *ctx )
 {
+    mpi_free( &ctx->Vi ); mpi_free( &ctx->Vf );
     mpi_free( &ctx->RQ ); mpi_free( &ctx->RP ); mpi_free( &ctx->RN );
     mpi_free( &ctx->QP ); mpi_free( &ctx->DQ ); mpi_free( &ctx->DP );
     mpi_free( &ctx->Q  ); mpi_free( &ctx->P  ); mpi_free( &ctx->D );