Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().

Misc/NEWS

@@ -116,6 +116,8 @@ Core and Builtins
 Library
 -------
 
+- Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().
+
 - Issue #13015: Fix a possible reference leak in defaultdict.__repr__.
   Patch by Suman Saha.
 

Modules/_ssl.c

@@ -519,7 +519,8 @@ _create_tuple_for_X509_NAME (X509_NAME *xname)
             goto fail1;
     }
     /* now, there's typically a dangling RDN */
-    if ((rdn != NULL) && (PyList_Size(rdn) > 0)) {
+    if (rdn != NULL) {
+        if (PyList_GET_SIZE(rdn) > 0) {
             rdnt = PyList_AsTuple(rdn);
             Py_DECREF(rdn);
             if (rdnt == NULL)
@@ -529,6 +530,10 @@ _create_tuple_for_X509_NAME (X509_NAME *xname)
             if (retcode < 0)
                 goto fail0;
         }
+        else {
+            Py_DECREF(rdn);
+        }
+    }
 
     /* convert list to tuple */
     rdnt = PyList_AsTuple(dn);