#2 BIGNUM leak ?

[stvv]

in DigiDocCert.c in function ReadCertSerialNumber at
line 147 :

bn = ASN1_INTEGER_to_BN(bs, NULL);

I think that bn MUST be freed up by the caller, e.g.
BN_free(bn);