free the ASN1_OCTET_STRING instance
diff --git a/src/cryptography/hazmat/backends/openssl/x509.py b/src/cryptography/hazmat/backends/openssl/x509.py
index 8b77a11..5d47c5e 100644
--- a/src/cryptography/hazmat/backends/openssl/x509.py
+++ b/src/cryptography/hazmat/backends/openssl/x509.py
@@ -225,6 +225,9 @@
asn1_string = self._backend._ffi.cast(
"ASN1_OCTET_STRING *", asn1_string
)
+ asn1_string = self._backend._ffi.gc(
+ asn1_string, self._backend._lib.ASN1_OCTET_STRING_free
+ )
return x509.SubjectKeyIdentifier(
self._backend._ffi.buffer(asn1_string.data, asn1_string.length)[:]
)