s4:gensec Avoid memory leak in error case in gensec_gssapi

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>

diff --git a/source4/auth/gensec/gensec_gssapi.c b/source4/auth/gensec/gensec_gssapi.c
index e33c78462e21515a3b7d21e353afa0f52b87788f..cca19646dfc0327ad51d484c304bf740578f2b80 100644 (file)
--- a/source4/auth/gensec/gensec_gssapi.c
+++ b/source4/auth/gensec/gensec_gssapi.c
@@ -836,6 +836,7 @@ init_sec_context_done:
                        }
                        
                        if (output_token.length < 4) {
+                               gss_release_buffer(&min_stat, &output_token);
                                return NT_STATUS_INVALID_PARAMETER;
                        }
 
@@ -989,6 +990,7 @@ init_sec_context_done:
                }
                        
                if (output_token.length < 4) {
+                       gss_release_buffer(&min_stat, &output_token);
                        return NT_STATUS_INVALID_PARAMETER;
                }