imv-os: Properly free strings for invalid input in pacman

diff --git a/src/libimcv/plugins/imv_os/pacman.c b/src/libimcv/plugins/imv_os/pacman.c
index 019e2adb84cb17e4540afb26ab5f3bf785731ae7..088313cd96e9fdc5137ba8d9303a06898295790e 100644 (file)
--- a/src/libimcv/plugins/imv_os/pacman.c
+++ b/src/libimcv/plugins/imv_os/pacman.c
@@ -396,6 +396,17 @@ static void process_packages(char *filename, char *product, bool security)
                                pacman_state = PACMAN_STATE_BEGIN_PACKAGE;
                }
        }
+       switch (pacman_state)
+       {
+               case PACMAN_STATE_END_PACKAGE:
+                       free(version);
+                       /* fall-through */
+               case PACMAN_STATE_VERSION:
+                       free(package);
+                       break;
+               default:
+                       break;
+       }
        fclose(file);
        db->destroy(db);