sasl_sspi: Fixed a memory leak with the GSSAPI base-64 decoded challenge

curl · Aug 17, 2014 · 23d52ca · 23d52ca
1 parent 437b9ba
commit 23d52ca
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/lib/curl_sasl_sspi.c b/lib/curl_sasl_sspi.c
@@ -416,8 +416,11 @@ CURLcode Curl_sasl_create_gssapi_user_message(struct SessionHandle *data,
                                                &resp_desc, &attrs,
                                                &tsDummy);
 
-  if(status != SEC_E_OK && status != SEC_I_CONTINUE_NEEDED)
+  if(status != SEC_E_OK && status != SEC_I_CONTINUE_NEEDED) {
+    Curl_safefree(chlg);
+
     return CURLE_RECV_ERROR;
+  }
 
   if(memcmp(&context, krb5->context, sizeof(context))) {
     s_pSecFn->DeleteSecurityContext(krb5->context);
@@ -431,6 +434,9 @@ CURLcode Curl_sasl_create_gssapi_user_message(struct SessionHandle *data,
                                 resp_buf.cbBuffer, outptr, outlen);
   }
 
+  /* Free the decoded challenge */
+  Curl_safefree(chlg);
+
   return result;
 }