diff --git a/security/AESStringCrypt.c b/security/AESStringCrypt.c
index 908b1ab41..819eb4817 100644
--- a/security/AESStringCrypt.c
+++ b/security/AESStringCrypt.c
@@ -222,6 +222,7 @@ unsigned long long AESStringCrypt(unsigned char *password,
     {
         if (fread(buffer, 1, 32, randfp) != 32)
         {
+            fclose(randfp);
             return AESSTRINGCRYPT_ERROR;
         }