From cdf5d324e324dd30a3b0ec03e072834eb4b53ffa Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Fri, 18 Nov 2016 23:59:47 -0500
Subject: [PATCH] kdc: _kdc_fast_unwrap_request leaks 'buf'

Change-Id: If4d3852112dadc331db1d3601b2c7bd6b3129429
---
 kdc/fast.c | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/kdc/fast.c b/kdc/fast.c
index 095929f85..3b3621037 100644
--- a/kdc/fast.c
+++ b/kdc/fast.c
@@ -356,7 +356,7 @@ _kdc_fast_unwrap_request(kdc_request_t r)
     krb5_keyblock armorkey;
     krb5_error_code ret;
     krb5_ap_req ap_req;
-    unsigned char *buf;
+    unsigned char *buf = NULL;
     KrbFastReq fastreq;
     size_t len, size;
     krb5_data data;
@@ -496,7 +496,6 @@ _kdc_fast_unwrap_request(kdc_request_t r)
 			       KRB5_KU_FAST_REQ_CHKSUM,
 			       buf, len, 
 			       &fxreq.u.armored_data.req_checksum);
-    free(buf);
     if (ret) {
 	kdc_log(r->context, r->config, 0,
 		"FAST request have a bad checksum");