From c651ab3821caf64d12f5237b98f0c2fd7595e5e8 Mon Sep 17 00:00:00 2001
From: "relyea%netscape.com" <relyea%netscape.com>
Date: Fri, 8 Nov 2002 19:10:54 +0000
Subject: [PATCH] Bug 176667: kaie authored the patch, ian/relyea reviewed it.

---
 security/nss/lib/certhigh/certvfy.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/security/nss/lib/certhigh/certvfy.c b/security/nss/lib/certhigh/certvfy.c
index 5abd6c8cc2b..20d45401fff 100644
--- a/security/nss/lib/certhigh/certvfy.c
+++ b/security/nss/lib/certhigh/certvfy.c
@@ -421,6 +421,9 @@ loser:
 	    return STAN_GetCERTCertificate(chain[1]); /* return the 2nd */
 	}
     } else {
+	if (chain[0]) {
+	    CERT_DestroyCertificate(cert);
+	}
 	PORT_SetError (SEC_ERROR_UNKNOWN_ISSUER);
     }
     return NULL;