From a3107b9af4e88601a6be51b86a4f840bc57bc302 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Love=20H=C3=B6rnquist=20=C3=85strand?= <lha@kth.se>
Date: Thu, 11 Dec 2008 04:59:48 +0000
Subject: [PATCH] free hx509_query on non matching cert. cid#120

git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@24101 ec53bebd-3082-4978-b11e-865c3cabbd6b
---
 kdc/pkinit.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/kdc/pkinit.c b/kdc/pkinit.c
index f5f6d14ba..d723495e4 100644
--- a/kdc/pkinit.c
+++ b/kdc/pkinit.c
@@ -470,8 +470,10 @@ _kdc_pk_rd_padata(krb5_context context,
 		}
 		ret = hx509_query_match_issuer_serial(q, &iasn.issuer, &iasn.serialNumber);
 		free_IssuerAndSerialNumber(&iasn);
-		if (ret)
+		if (ret) {
+		    hx509_query_free(kdc_identity->hx509ctx, q);
 		    continue;
+		}
 
 		ret = hx509_certs_find(kdc_identity->hx509ctx,
 				       kdc_identity->certs,