From 5a0aaf9e19c64513cdbc6caefeee27fe42e33eb7 Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Fri, 18 Mar 2022 13:27:07 -0500
Subject: [PATCH] krb5: Fix leak in default an2ln DB plugin

---
 lib/krb5/aname_to_localname.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/lib/krb5/aname_to_localname.c b/lib/krb5/aname_to_localname.c
index 11f270d49..8515c306e 100644
--- a/lib/krb5/aname_to_localname.c
+++ b/lib/krb5/aname_to_localname.c
@@ -420,6 +420,7 @@ an2ln_def_plug_an2ln(void *plug_ctx, krb5_context context,
 	heim_dict_set_value(db_options, HSTR("read-only"),
 			    heim_number_create(1));
     dbh = heim_db_create(NULL, an2ln_db_fname, db_options, &error);
+    heim_release(db_options);
     if (dbh == NULL) {
 	krb5_set_error_message(context, heim_error_get_code(error),
 			       N_("Couldn't open aname2lname-text-db", ""));