diff --git a/lib/krb5/crypto.c b/lib/krb5/crypto.c
index a884c9424..9803b883c 100644
--- a/lib/krb5/crypto.c
+++ b/lib/krb5/crypto.c
@@ -1655,9 +1655,11 @@ encrypt_internal(krb5_context context,
     if(ret) {
 	memset(p, 0, block_sz);
 	free(p);
+	free_Checksum(&cksum);
 	return ret;
     }
     memcpy(p + et->confoundersize, cksum.checksum.data, cksum.checksum.length);
+    free_Checksum(&cksum);
     ret = _key_schedule(context, &crypto->key);
     if(ret) {
 	memset(p, 0, block_sz);