From fcfe75e5e950651346469017e61647e00d428a14 Mon Sep 17 00:00:00 2001
From: Aidan Keefe <aidan.keefe@wolfssl.com>
Date: Fri, 29 May 2026 11:32:46 -0600
Subject: [PATCH] F-3732 added XFCLOSE function in error path

---
 src/sign-verify/clu_verify.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/sign-verify/clu_verify.c b/src/sign-verify/clu_verify.c
index 11a25f20..7d042a6f 100644
--- a/src/sign-verify/clu_verify.c
+++ b/src/sign-verify/clu_verify.c
@@ -842,6 +842,7 @@ int wolfCLU_verify_signature_dilithium(byte* sig, int sigSz, byte* msg,
     if (XFSEEK(keyFile, 0, SEEK_SET) != 0 ||
         (int)XFREAD(keyBuf, 1, keyFileSz, keyFile) != keyFileSz) {
         wolfCLU_LogError("Failed to read public key.\nRET: %d", ret);
+        XFCLOSE(keyFile);
         XFREE(keyBuf, HEAP_HINT, DYNAMIC_TYPE_TMP_BUFFER);
         wc_dilithium_free(key);
     #ifdef WOLFSSL_SMALL_STACK