Fix pctx leak with RAII wrapper

CHANGELOG.md

@@ -5,21 +5,18 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
-## [6.0.0-dev21]
+## [6.0.0-dev20]
 
-[6.0.0-dev21]: https://github.com/microsoft/CCF/releases/tag/6.0.0-dev21
+[6.0.0-dev20]: https://github.com/microsoft/CCF/releases/tag/6.0.0-dev20
 
 ### Added
 
 - Added `GET /node/attestations` and `GET /node/attestations/self`, as aliases for the `/quote` endpoints. These return attestations on every platform, not only SGX quotes.
 
-## [6.0.0-dev20]
-
-[6.0.0-dev20]: https://github.com/microsoft/CCF/releases/tag/6.0.0-dev20
-
 ### Fixed
 
 - CA certificate bundles used for JWT refresh and containing more than one certificate are now handled correctly (#6817).
+- Memory leak during EC key creation is fixed (#6845).
 
 ## [6.0.0-dev19]
 

python/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "ccf"
-version = "6.0.0-dev21"
+version = "6.0.0-dev20"
 authors = [
   { name="CCF Team", email="CCF-Sec@microsoft.com" },
 ]

src/crypto/openssl/public_key.cpp

@@ -288,7 +288,7 @@ namespace ccf::crypto
       OSSL_PKEY_PARAM_PUB_KEY, (void*)raw.data(), raw.size());
     params[2] = OSSL_PARAM_construct_end();
 
-    auto pctx = EVP_PKEY_CTX_new_from_name(NULL, "EC", NULL);
+    Unique_EVP_PKEY_CTX pctx("EC");
     CHECK1(EVP_PKEY_fromdata_init(pctx));
 
     EVP_PKEY* pkey = NULL;