From: Stephan Bosch <stephan.bosch@open-xchange.com>
Date: Mon, 13 Oct 2025 09:51:33 +0000 (+0200)
Subject: lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_gs1_unwrap()... 
X-Git-Tag: 2.4.2~111
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=1c4aa650a68a5f3f15efa7173ecfc1dd1e1f7bb7;p=thirdparty%2Fdovecot%2Fcore.git

lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_gs1_unwrap() error path

Reported by Coverity.
---

diff --git a/src/lib-sasl/dsasl-client-mech-gssapi.c b/src/lib-sasl/dsasl-client-mech-gssapi.c
index 9a6a646b15..89be9ab76a 100644
--- a/src/lib-sasl/dsasl-client-mech-gssapi.c
+++ b/src/lib-sasl/dsasl-client-mech-gssapi.c
@@ -232,6 +232,7 @@ mech_gssapi_gs1_unwrap(struct gssapi_sasl_client *gclient,
 
 	if (out_buf.length != 4) {
 		*error_r = "Bad server message: Invalid security data";
+		(void)gss_release_buffer(&minor_status, &out_buf);
 		return DSASL_CLIENT_RESULT_ERR_PROTOCOL;
 	}