detect: fix memory leak in app-layer-event keyword

Bug #2515.

diff --git a/src/detect-app-layer-event.c b/src/detect-app-layer-event.c
index 02e58560a138119eafeaeb60ad242a17e397423d..ed4f7fdc8d9fd4878cfb3ac30287921ec24435a0 100644 (file)
--- a/src/detect-app-layer-event.c
+++ b/src/detect-app-layer-event.c
@@ -310,6 +310,9 @@ static int DetectAppLayerEventSetupP2(Signature *s,
     if (DetectAppLayerEventParseAppP2((DetectAppLayerEventData *)sm->ctx, s->proto.proto,
                                       &event_type) < 0) {
         /* DetectAppLayerEventParseAppP2 prints errors */
+
+        /* sm has been removed from lists by DetectAppLayerEventPrepare */
+        SigMatchFree(sm);
         return -1;
     }
     SigMatchAppendSMToList(s, sm, g_applayer_events_list_id);