Language: C
Label: vulnerable
CWE: CWE-415 \u2014 Double Free
The product calls free() twice on the same memory address, potentially leading to modification of unexpected memory locations.

Code:
static void do_free_publickey(struct rsa_public_key *s)
{
	if (s) {
		crypto_bignum_free(s->n);
		crypto_bignum_free(s->e);
	}
}