From fc72ab9114188b6b4367a02af8fe033d86afed7b Mon Sep 17 00:00:00 2001
From: roytam1 <roytam@gmail.com>
Date: Sat, 21 Dec 2024 10:07:02 +0800
Subject: [PATCH] import from UXP: [NSS] Bug 1899402 - Correctly destroy
 bulkkey in error scenario. r=jschanck (e8252090)

---
 security/nss/lib/pkcs7/p7decode.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/security/nss/lib/pkcs7/p7decode.c b/security/nss/lib/pkcs7/p7decode.c
index 641d201e5..a6a98960f 100644
--- a/security/nss/lib/pkcs7/p7decode.c
+++ b/security/nss/lib/pkcs7/p7decode.c
@@ -542,6 +542,7 @@ sec_pkcs7_decoder_start_decrypt(SEC_PKCS7DecoderContext *p7dcx, int depth,
      * We are done with (this) bulkkey now.
      */
     PK11_FreeSymKey(bulkkey);
+    bulkkey = NULL;
 
     if (decryptobj == NULL) {
         p7dcx->error = PORT_GetError();