fix ASAN complaints

Signed-off-by: Stephan Mueller <smueller@chronox.de>

Author: smuellerDD

apps/src/sbvarsign.c

@@ -642,6 +642,9 @@ int main(int argc, char **argv)
 	CKINT((add_auth_descriptor(&ws->parsed_opts, ctx, include_attrs)));
 
 out:
+	if (ctx->var_name)
+		free(ctx->var_name);
+	pkcs7_clean_opts(&ws->parsed_opts);
 	LC_RELEASE_MEM(ws);
 	PKCS7_FREE
 	return -ret;

apps/tests/meson.build

@@ -817,29 +817,23 @@ if (host_machine.system() != 'windows' and
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA87',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool ML-DSA65',
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA65',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool ML-DSA44',
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA44',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
@@ -848,29 +842,23 @@ if (host_machine.system() != 'windows' and
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA87-ED448',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool ML-DSA65-ED25519',
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA65-ED25519',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool ML-DSA44-ED25519',
 		     sbvarsign_test_script,
 		     args: [ 'ML-DSA44-ED25519',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
@@ -879,59 +867,47 @@ if (host_machine.system() != 'windows' and
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-128F',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool SLH-DSA-SHAKE-128S',
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-128S',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool SLH-DSA-SHAKE-192F',
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-192F',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool SLH-DSA-SHAKE-192S',
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-192S',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool SLH-DSA-SHAKE-256F',
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-256F',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)
 		test('Secure boot sbvarsign tool SLH-DSA-SHAKE-256S',
 		     sbvarsign_test_script,
 		     args: [ 'SLH-DSA-SHAKE-256S',
 			     lc_x509_generator.full_path(),
-			     sbvarsign.full_path(),
-			     sbverify.full_path(),
-			     efi_test_file
+			     sbvarsign.full_path()
 			   ],
 		     timeout: 300, suite: regression,
 		     should_fail: fips140_negative_expect_fail)