From 04e3ea430760b15f9413cb6391f96b7b6ec33ef4 Mon Sep 17 00:00:00 2001
From: Luke Howard <lukeh@padl.com>
Date: Tue, 3 Aug 2021 17:20:21 +1000
Subject: [PATCH] kdc: don't leak FAST req_body checksum buffer

The temporary buffer used to checksum the KDC-REQ body in
_kdc_fast_unwrap_request() was not freed.
---
 kdc/fast.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kdc/fast.c b/kdc/fast.c
index 4ab078307..d9d6d5f09 100644
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -556,6 +556,7 @@ _kdc_fast_unwrap_request(astgs_request_t r)
 	krb5_free_principal(r->context, armor_server);
     if(armor_user)
 	_kdc_free_ent(r->context, armor_user);
+    free(buf);
 
     return ret;
 }