From 7705ff65880413c528080c8bd61bd8978debd3b6 Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Sat, 31 Dec 2022 00:51:46 -0600
Subject: [PATCH] krb5: Fix FAST anon PKINIT leak

---
 lib/krb5/fast.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/krb5/fast.c b/lib/krb5/fast.c
index 7da456ce6..338c4facf 100644
--- a/lib/krb5/fast.c
+++ b/lib/krb5/fast.c
@@ -883,7 +883,7 @@ _krb5_fast_anon_pkinit_step(krb5_context context,
 	ret = krb5_make_principal(context, &principal, realm,
 				  KRB5_WELLKNOWN_NAME, KRB5_ANON_NAME, NULL);
 	if (ret)
-	    return ret;
+	    goto out;
 
 	ret = krb5_get_init_creds_opt_set_pkinit(context,
 						 state->anon_pkinit_opt,