Bug 375019, Potential leak of certRequest

Add-on patch by Alexei Volkov
r=kengert

security/nss/lib/libpkix/pkix_pl_nss/pki/pkix_pl_ocsprequest.c

@@ -374,6 +374,8 @@ pkix_pl_OcspRequest_Create(
                 cid->certID, cert->nssCert, time, 
                 addServiceLocatorExtension, nssSignerCert);
 
+        ocspRequest->decoded = certRequest;
+
         if (certRequest == NULL) {
                 PKIX_ERROR(PKIX_UNABLETOCREATECERTOCSPREQUEST);
         }
@@ -385,8 +387,6 @@ pkix_pl_OcspRequest_Create(
                 PKIX_ERROR(PKIX_UNABLETOADDACCEPTABLERESPONSESTOREQUEST);
         }
 
-        ocspRequest->decoded = certRequest;
-
         encoding = CERT_EncodeOCSPRequest(NULL, certRequest, NULL);
 
         ocspRequest->encoded = encoding;