From: Steve Holme <steve_holme@hotmail.com>
Date: Sun, 17 Aug 2014 21:58:48 +0000 (+0100)
Subject: sasl_sspi: Fixed a memory leak with the GSSAPI base-64 decoded challenge
X-Git-Tag: curl-7_38_0~79
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=23d52ca4a7be5e3c942dc001e95cff6ba905f1a1;p=thirdparty%2Fcurl.git

sasl_sspi: Fixed a memory leak with the GSSAPI base-64 decoded challenge
---

diff --git a/lib/curl_sasl_sspi.c b/lib/curl_sasl_sspi.c
index 422b2f64c1..df4da96456 100644
--- a/lib/curl_sasl_sspi.c
+++ b/lib/curl_sasl_sspi.c
@@ -416,8 +416,11 @@ CURLcode Curl_sasl_create_gssapi_user_message(struct SessionHandle *data,
                                                &resp_desc, &attrs,
                                                &tsDummy);
 
-  if(status != SEC_E_OK && status != SEC_I_CONTINUE_NEEDED)
+  if(status != SEC_E_OK && status != SEC_I_CONTINUE_NEEDED) {
+    Curl_safefree(chlg);
+
     return CURLE_RECV_ERROR;
+  }
 
   if(memcmp(&context, krb5->context, sizeof(context))) {
     s_pSecFn->DeleteSecurityContext(krb5->context);
@@ -431,6 +434,9 @@ CURLcode Curl_sasl_create_gssapi_user_message(struct SessionHandle *data,
                                 resp_buf.cbBuffer, outptr, outlen);
   }
 
+  /* Free the decoded challenge */
+  Curl_safefree(chlg);
+
   return result;
 }