diff --git a/kdc/kx509.c b/kdc/kx509.c
index f3afe9f65..79d62aef8 100644
--- a/kdc/kx509.c
+++ b/kdc/kx509.c
@@ -757,8 +757,6 @@ check_authz(krb5_context context,
             break;
 
         if ((ret = der_parse_heim_oid(s, ".", &oid))) {
-            free(cprinc);
-            free(s);
             goto out;
         }
         for (k = 0; k < sizeof(eku_whitelist)/sizeof(eku_whitelist[0]); k++) {