From a3e95f16b778c8270ae63a91e3ad33c183ad37b1 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Fri, 18 Nov 2016 23:53:53 -0500
Subject: [PATCH] krb5: _kdc_encode_reply leaks 'buf' if early exit

Change-Id: I9e94535cd974ba463f813982325440a4ad8ba217
---
 kdc/kerberos5.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kdc/kerberos5.c b/kdc/kerberos5.c
index d7662658f..95a74927f 100644
--- a/kdc/kerberos5.c
+++ b/kdc/kerberos5.c
@@ -840,6 +840,7 @@ _kdc_encode_reply(krb5_context context,
         const char *msg = krb5_get_error_message(context, ret);
 	kdc_log(context, config, 0, "krb5_crypto_init failed: %s", msg);
 	krb5_free_error_message(context, msg);
+	free(buf);
 	return ret;
     }