From c650e37321d8ca95c5e34ed1a97120236fa260a0 Mon Sep 17 00:00:00 2001
From: Nicolas Williams <nico@twosigma.com>
Date: Wed, 19 Jan 2022 17:32:16 -0600
Subject: [PATCH] kdc: Fix leak caused by a1481f1f0

---
 kdc/connect.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/kdc/connect.c b/kdc/connect.c
index 81f0ed5e5..05ff9e183 100644
--- a/kdc/connect.c
+++ b/kdc/connect.c
@@ -625,13 +625,13 @@ handle_vanilla_tcp (krb5_context context,
     krb5_storage *sp;
     uint32_t len;
 
+    if (d->len < 4)
+        return 0;
     sp = krb5_storage_from_mem(d->buf, d->len);
     if (sp == NULL) {
 	kdc_log (context, config, 1, "krb5_storage_from_mem failed");
 	return -1;
     }
-    if (d->len < 4)
-        return 0;
     ret = krb5_ret_uint32(sp, &len);
     if (ret) {
 	kdc_log(context, config, 4, "failed to read request length");