From: Stephan Bosch <stephan.bosch@open-xchange.com>
Date: Mon, 13 Oct 2025 09:48:32 +0000 (+0200)
Subject: lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_sec_context(... 
X-Git-Tag: 2.4.2~112
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1a419d43ac3aeed3ef6ff80fafb6ce98aba9daad;p=thirdparty%2Fdovecot%2Fcore.git

lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_sec_context() error path

Reported by Coverity.
---

diff --git a/src/lib-sasl/dsasl-client-mech-gssapi.c b/src/lib-sasl/dsasl-client-mech-gssapi.c
index 74821cb6a5..9a6a646b15 100644
--- a/src/lib-sasl/dsasl-client-mech-gssapi.c
+++ b/src/lib-sasl/dsasl-client-mech-gssapi.c
@@ -165,6 +165,7 @@ mech_gssapi_sec_context(struct gssapi_sasl_client *gclient,
 		i_assert(ret_mech_oid != NULL);
 		if (!auth_gssapi_oid_equal(ret_mech_oid,
 					   auth_gssapi_mech_krb5_oid)) {
+			(void)gss_release_buffer(&minor_status, out_buf);
 			*error_r = "GSSAPI mechanism not Kerberos5";
 			return -1;
 		}