===================================================================
RCS file: /cvsrepo/anoncvs/cvs/src/usr.bin/openssl/apps.c,v
retrieving revision 1.28
retrieving revision 1.29
diff -u -r1.28 -r1.29
--- src/usr.bin/openssl/apps.c	2015/07/15 13:54:34	1.28
+++ src/usr.bin/openssl/apps.c	2015/07/16 15:03:35	1.29
@@ -1,4 +1,4 @@
-/* $OpenBSD: apps.c,v 1.28 2015/07/15 13:54:34 jsing Exp $ */
+/* $OpenBSD: apps.c,v 1.29 2015/07/16 15:03:35 beck Exp $ */
 /*
  * Copyright (c) 2014 Joel Sing <jsing@openbsd.org>
  *
@@ -2027,8 +2027,10 @@
 		*badarg = 1;
 		goto end;
 	}
-	if (otmp)
+	if (otmp) {
 		X509_VERIFY_PARAM_add0_policy(*pm, otmp);
+		otmp = NULL;
+	}
 	if (flags)
 		X509_VERIFY_PARAM_set_flags(*pm, flags);
 
@@ -2047,6 +2049,7 @@
 	if (pargc)
 		*pargc -= *pargs - oldargs;
 
+	ASN1_OBJECT_free(otmp);
 	return 1;
 }