Make X509Certificate::CreateFromHandle() copy the OSCertHandle, rather than assume ownership

chrome/browser/ssl/ssl_client_auth_handler_win.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "chrome/browser/ssl/ssl_client_auth_handler.h"
 
 #include <cryptuiapi.h>
 #pragma comment(lib, "cryptui.lib")
 
 #include "app/l10n_util.h"
@@ skipping 30 matching lines @@
       IDS_CLIENT_CERT_DIALOG_TEXT,
       ASCIIToWide(cert_request_info_->host_and_port));
   PCCERT_CONTEXT cert_context = CryptUIDlgSelectCertificateFromStore(
       client_certs, browser_hwnd, title.c_str(), text.c_str(), 0, 0, NULL);
 
   if (cert_context) {
     cert = net::X509Certificate::CreateFromHandle(
         cert_context,
         net::X509Certificate::SOURCE_LONE_CERT_IMPORT,
         net::X509Certificate::OSCertHandles());
+    net::X509Certificate::FreeOSCertHandle(cert_context);
   }
 
   ok = CertCloseStore(client_certs, CERT_CLOSE_STORE_CHECK_FLAG);
   DCHECK(ok);
 
   CertificateSelected(cert);
 }