Repository: dotnet/runtime
File: src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/SafeEvpPKeyHandle.OpenSsl.cs (C#)

Code before:
                throw new InvalidOperationException(SR.Cryptography_OpenInvalidHandle);

            SafeEvpPKeyHandle safeHandle = new SafeEvpPKeyHandle();

            // Keep the source handle alive so that a concurrent Dispose on another
            // thread does not zero the handle field between UpRef and the copy below.
            bool addedRef = false;

            try
            {
                DangerousAddRef(ref addedRef);

                IntPtr handleSnapshot = DangerousGetHandle();
                IntPtr extraHandleSnapshot = ExtraHandle;

                int uprefResult = Interop.Crypto.UpRefEvpPkey(this);

                if (uprefResult != 1)
                {
                    Debug.Fail("Called UpRefEvpPkey on a key which was already marked for destruction");
                    throw Interop.Crypto.CreateOpenSslCryptographicException();
                }

                // Use the captured snapshots so that a concurrent Dispose
                // cannot cause us to copy a zeroed-out handle value.
                safeHandle.SetHandle(handleSnapshot);
                // ExtraHandle is upref'd by UpRefEvpPkey
                safeHandle.ExtraHandle = extraHandleSnapshot;
            }
            catch
            {
                safeHandle.Dispose();
                throw;
            }
            finally
            {
                if (addedRef)
                {
                    DangerousRelease();
                }
            }

            return safeHandle;
        }

        /// <summary>
        ///   Open a named private key using a named OpenSSL <code>ENGINE</code>.
        /// </summary>
        /// <param name="engineName">
        ///   The name of the <code>ENGINE</code> to process the private key open request.
        /// </param>

Review comment (suggestion):
@copilot we should not need to "capture" the handle here because we have done a DangerousAddRef which will stop `ReleaseHandle` from being called until the `DangerousRelease`.

Code after:
                throw new InvalidOperationException(SR.Cryptography_OpenInvalidHandle);

            // Keep the source handle alive so that a concurrent Dispose on another
            // thread does not zero the handle field between UpRef and the copy below.
            bool addedRef = false;

            try
            {
                DangerousAddRef(ref addedRef);

                // Reliability: Allocate the SafeHandle before calling UpRefEvpPkey so
                // that we don't lose a tracked reference in low-memory situations.
                SafeEvpPKeyHandle safeHandle = new SafeEvpPKeyHandle();

                int success = Interop.Crypto.UpRefEvpPkey(this);

                if (success != 1)
                {
                    Debug.Fail("Called UpRefEvpPkey on a key which was already marked for destruction");
                    Exception e = Interop.Crypto.CreateOpenSslCryptographicException();
                    safeHandle.Dispose();
                    throw e;
                }

                // Since we didn't actually create a new handle, copy the handle
                // to the new SafeHandle. DangerousAddRef prevents ReleaseHandle
                // from being called, so handle and ExtraHandle are stable here.
                safeHandle.SetHandle(handle);
                // ExtraHandle is upref'd by UpRefEvpPkey
                safeHandle.ExtraHandle = ExtraHandle;
                return safeHandle;
            }
            finally
            {
                if (addedRef)
                {
                    DangerousRelease();
                }
            }
        }

        /// <summary>
        ///   Open a named private key using a named OpenSSL <code>ENGINE</code>.
        /// </summary>
        /// <param name="engineName">
        ///   The name of the <code>ENGINE</code> to process the private key open request.
        /// </param>
        /// <param name="keyId">
        ///   The name of the key to open.
        /// </param>
        /// <returns>