From 2be6646adc0292ce28b597d0efdeeff7d59a67ad Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sat, 19 Nov 2016 10:18:12 -0500
Subject: [PATCH] gss/krb5: gsskrb5_acceptor_start authenticator leak

Change-Id: I78c546590776ae4c30a49bfb919285b0eb15a06b
---
 lib/gssapi/krb5/accept_sec_context.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/gssapi/krb5/accept_sec_context.c b/lib/gssapi/krb5/accept_sec_context.c
index b6308cb07..60b5bb8f9 100644
--- a/lib/gssapi/krb5/accept_sec_context.c
+++ b/lib/gssapi/krb5/accept_sec_context.c
@@ -584,6 +584,7 @@ gsskrb5_acceptor_start(OM_uint32 * minor_status,
 	    if (ap_options & AP_OPTS_MUTUAL_REQUIRED)
 		ctx->flags |= GSS_C_MUTUAL_FLAG;
 	}
+	krb5_free_authenticator(context, &authenticator);
     }
 
     if(ctx->flags & GSS_C_MUTUAL_FLAG) {