Ensure LDAPMessage is freed on errors. Fixes #4864

diff --git a/src/listen/ldap_sync/rfc4533.c b/src/listen/ldap_sync/rfc4533.c
index 7eb425831d2a184c7a202d755ecc557a336f8084..6b71226359406a290587cdb811fc893ed9285eb5 100644 (file)
--- a/src/listen/ldap_sync/rfc4533.c
+++ b/src/listen/ldap_sync/rfc4533.c
@@ -271,6 +271,7 @@ int rfc4533_sync_search_entry(sync_state_t *sync, LDAPMessage *msg, LDAPControl
        if (!ctrls) {
        missing_control:
                ERROR("searchResEntry missing syncStateValue control");
+               ldap_msgfree(msg);
                return -1;
        }
 
@@ -296,7 +297,7 @@ int rfc4533_sync_search_entry(sync_state_t *sync, LDAPMessage *msg, LDAPControl
 
        error:
                if (ber) ber_free(ber, 1);
-
+               ldap_msgfree(msg);
                return -1;
        }