diff --git a/lib/hx509/print.c b/lib/hx509/print.c
index 8c2eaa782..0d35376c8 100644
--- a/lib/hx509/print.c
+++ b/lib/hx509/print.c
@@ -577,6 +577,7 @@ check_basicConstraints(hx509_validate_ctx ctx,
 	    validate_print(ctx, HX509_VALIDATE_F_VALIDATE,
 			   "cA is FALSE, not allowed to be\n");
     }
+    free_BasicConstraints(&b);
 
     return 0;
 }