Make X509Certificate::CreateFromHandle() copy the OSCertHandle, rather than assume ownership

net/base/cert_test_util.cc

Index: net/base/cert_test_util.cc
diff --git a/net/base/cert_test_util.cc b/net/base/cert_test_util.cc
index 372c25638676869d769f6d86bc292566bf6cd7ec..9fc6573a187b2bb63500e9282a25837c38e39dcc 100644
--- a/net/base/cert_test_util.cc
+++ b/net/base/cert_test_util.cc
@@ -55,9 +55,12 @@ X509Certificate* LoadTemporaryRootCert(const FilePath& filename) {
     return NULL;
   }
 
-  return X509Certificate::CreateFromHandle(cert,
+  X509Certificate* result = X509Certificate::CreateFromHandle(
+      cert,
       X509Certificate::SOURCE_LONE_CERT_IMPORT,
       X509Certificate::OSCertHandles());
+  CERT_DestroyCertificate(cert);
+  return result;
 }
 #endif
 
@@ -89,7 +92,7 @@ X509Certificate* LoadTemporaryRootCert(const FilePath& filename) {
 
   SecCertificateRef cert_ref = static_cast<SecCertificateRef>(
       const_cast<void*>(CFArrayGetValueAtIndex(cert_array, 0)));
-  CFRetain(cert_ref);
+
   return X509Certificate::CreateFromHandle(cert_ref,
       X509Certificate::SOURCE_LONE_CERT_IMPORT,
       X509Certificate::OSCertHandles());