From d80a1b9556f683986e67e324ccd6d685369f5816 Mon Sep 17 00:00:00 2001
From: Jeffrey Altman <jaltman@secure-endpoints.com>
Date: Sun, 23 Jan 2022 22:25:43 -0500
Subject: [PATCH] kdc: hprop propagate_database do not leak 'server'

Change-Id: I0b2b6343134603ecffb6cd827d0828463378cff4
---
 kdc/hprop.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/kdc/hprop.c b/kdc/hprop.c
index cf6093c5a..c1db11b97 100644
--- a/kdc/hprop.c
+++ b/kdc/hprop.c
@@ -324,6 +324,7 @@ propagate_database (krb5_context context, int type,
 	    if (ret) {
 		failed++;
 		krb5_warn(context, ret, "unable to obtain default or set realm");
+		krb5_free_principal(context, server);
 		close(fd);
 		continue;
 	    }