From 1c4aa650a68a5f3f15efa7173ecfc1dd1e1f7bb7 Mon Sep 17 00:00:00 2001 From: Stephan Bosch Date: Mon, 13 Oct 2025 11:51:33 +0200 Subject: [PATCH] lib-sasl: dsasl-client-mech-gssapi - Fix memory leak in mech_gssapi_gs1_unwrap() error path Reported by Coverity. --- src/lib-sasl/dsasl-client-mech-gssapi.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/lib-sasl/dsasl-client-mech-gssapi.c b/src/lib-sasl/dsasl-client-mech-gssapi.c index 9a6a646b15..89be9ab76a 100644 --- a/src/lib-sasl/dsasl-client-mech-gssapi.c +++ b/src/lib-sasl/dsasl-client-mech-gssapi.c @@ -232,6 +232,7 @@ mech_gssapi_gs1_unwrap(struct gssapi_sasl_client *gclient, if (out_buf.length != 4) { *error_r = "Bad server message: Invalid security data"; + (void)gss_release_buffer(&minor_status, &out_buf); return DSASL_CLIENT_RESULT_ERR_PROTOCOL; } -- 2.47.3