free key on error

diff --git a/lib/dns/dst_api.c b/lib/dns/dst_api.c
index 7685dcb33327ec71df5b7354e94470394c7321f3..c0684d903c3cb98998c52e85a583f8e453346ada 100644 (file)
--- a/lib/dns/dst_api.c
+++ b/lib/dns/dst_api.c
@@ -802,6 +802,9 @@ dst_key_fromgssapi(const dns_name_t *name, gss_ctx_id_t gssctx,
        *keyp = key;
        result = ISC_R_SUCCESS;
 out:
+       if (result != ISC_R_SUCCESS) {
+               dst_key_free(&key);
+       }
        return result;
 }