From 04f17a5bae7d6622491559920fc56ef5fe541689 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sat, 19 Nov 2016 02:16:19 -0500
Subject: [PATCH] kadmin: stash() do not leak 'mkey' if early exit

Change-Id: I4d9f847e833a895933dcd69cc1e7aed80d85aea5
---
 kadmin/stash.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kadmin/stash.c b/kadmin/stash.c
index 5ada94fff..1eb56b36f 100644
--- a/kadmin/stash.c
+++ b/kadmin/stash.c
@@ -75,6 +75,7 @@ stash(struct stash_options *opt, int argc, char **argv)
 	if (ret)
 	    krb5_warn(context, ret, "reading master key from %s",
 		      opt->key_file_string);
+	hdb_free_master_key(context, mkey);
 	return 0;
     } else {
 	krb5_keyblock key;