Dispose of key when importing X.509 certificate from PEM

dotnet · Sep 29, 2022 · b631a67 · b631a67
1 parent e3ed6c1
commit b631a67
Showing 1 changed file with 11 additions and 9 deletions.
diff --git a/...curity.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Certificate2.cs b/...curity.Cryptography/src/System/Security/Cryptography/X509Certificates/X509Certificate2.cs
@@ -1433,16 +1433,18 @@ private static X509Certificate2 ExtractKeyFromPem<TAlg>(
                 {
                     if (label.SequenceEqual(eligibleLabel))
                     {
-                        TAlg key = factory();
-                        key.ImportFromPem(contents[fields.Location]);
-
-                        try
-                        {
-                            return import(key);
-                        }
-                        catch (ArgumentException ae)
+                        using (TAlg key = factory())
                         {
-                            throw new CryptographicException(SR.Cryptography_X509_NoOrMismatchedPemKey, ae);
+                            key.ImportFromPem(contents[fields.Location]);
+
+                            try
+                            {
+                                return import(key);
+                            }
+                            catch (ArgumentException ae)
+                            {
+                                throw new CryptographicException(SR.Cryptography_X509_NoOrMismatchedPemKey, ae);
+                            }
                         }
                     }
                 }