Fix memory leaks in LEDAkem

crypto_kem/ledakemlt12/leaktime/rng.c

@@ -81,7 +81,7 @@ int PQCLEAN_LEDAKEMLT12_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
             memcpy(x + offset, ctx->buffer + ctx->buffer_pos, xlen);
             ctx->buffer_pos += xlen;
 
-            return RNG_SUCCESS;
+            goto end;
         }
 
         // take what's in the buffer
@@ -103,7 +103,8 @@ int PQCLEAN_LEDAKEMLT12_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
         }
 
     }
-    aes256_ctx_release(&ctx256);
+end:
 
+    aes256_ctx_release(&ctx256);
     return RNG_SUCCESS;
 }

crypto_kem/ledakemlt32/leaktime/rng.c

@@ -81,7 +81,7 @@ int PQCLEAN_LEDAKEMLT32_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
             memcpy(x + offset, ctx->buffer + ctx->buffer_pos, xlen);
             ctx->buffer_pos += xlen;
 
-            return RNG_SUCCESS;
+            goto end;
         }
 
         // take what's in the buffer
@@ -103,6 +103,7 @@ int PQCLEAN_LEDAKEMLT32_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
         }
 
     }
+end:
     aes256_ctx_release(&ctx256);
 
     return RNG_SUCCESS;

crypto_kem/ledakemlt52/leaktime/rng.c

@@ -81,7 +81,7 @@ int PQCLEAN_LEDAKEMLT52_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
             memcpy(x + offset, ctx->buffer + ctx->buffer_pos, xlen);
             ctx->buffer_pos += xlen;
 
-            return RNG_SUCCESS;
+            goto end;
         }
 
         // take what's in the buffer
@@ -103,6 +103,7 @@ int PQCLEAN_LEDAKEMLT52_LEAKTIME_seedexpander(AES_XOF_struct *ctx, uint8_t *x, s
         }
 
     }
+end:
     aes256_ctx_release(&ctx256);
 
     return RNG_SUCCESS;