Don't leak if failed the MS-CHAP password handle

diff --git a/src/modules/rlm_mschap/rlm_mschap.c b/src/modules/rlm_mschap/rlm_mschap.c
index 0cef811f2f2e66eb08a226b3f634496b0df22461..687b284ececdfabf75a5c806e745b0f7373d6d41 100644 (file)
--- a/src/modules/rlm_mschap/rlm_mschap.c
+++ b/src/modules/rlm_mschap/rlm_mschap.c
@@ -1992,7 +1992,7 @@ static rlm_rcode_t CC_HINT(nonnull) mod_authenticate(void *instance, UNUSED void
                uint8_t         *p;
 
                rcode = mschap_process_cpw_request(instance, request, cpw, nt_password);
-               if (rcode != RLM_MODULE_OK) return rcode;
+               if (rcode != RLM_MODULE_OK) goto finish;
 
                /*
                 *      Clear any expiry bit so the user can now login;