Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().

Misc/NEWS

@@ -93,6 +93,8 @@ Core and Builtins
 Library
 -------
 
+- Issue #13014: Fix a possible reference leak in SSLSocket.getpeercert().
+
 - Issue #13987: HTMLParser is now able to handle EOFs in the middle of a
   construct and malformed start tags.
 

Modules/_ssl.c

@@ -644,7 +644,8 @@ _create_tuple_for_X509_NAME (X509_NAME *xname)
             goto fail1;
     }
     /* now, there's typically a dangling RDN */
-    if ((rdn != NULL) && (PyList_Size(rdn) > 0)) {
+    if (rdn != NULL) {
+        if (PyList_GET_SIZE(rdn) > 0) {
             rdnt = PyList_AsTuple(rdn);
             Py_DECREF(rdn);
             if (rdnt == NULL)
@@ -654,6 +655,10 @@ _create_tuple_for_X509_NAME (X509_NAME *xname)
             if (retcode < 0)
                 goto fail0;
         }
+        else {
+            Py_DECREF(rdn);
+        }
+    }
 
     /* convert list to tuple */
     rdnt = PyList_AsTuple(dn);