]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
auth: Fix request leak when client tries to authenticate with unsupported mechanism
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Mon, 9 Mar 2026 14:01:04 +0000 (16:01 +0200)
committeraki.tuomi <aki.tuomi@open-xchange.com>
Thu, 12 Mar 2026 14:59:51 +0000 (14:59 +0000)
src/auth/auth-request-handler.c

index 769d1e45f5f561efe514295ed7e28c9f6cf57f16..17fd46720234baec3a6fa1d175f077e1c9ec18e4 100644 (file)
@@ -682,8 +682,10 @@ int auth_request_handler_auth_begin(struct auth_request_handler *handler,
        const struct sasl_server_mech *mech;
 
        if (auth_request_handler_find_mech(handler, request, mech_name,
-                                          &mech) < 0)
+                                          &mech) < 0) {
+               auth_request_unref(&request);
                return -1;
+       }
        auth_request_init_sasl(request, mech);
 
        request->to_abort = timeout_add(MASTER_AUTH_SERVER_TIMEOUT_SECS * 1000,