krb5: Fix FAST anon PKINIT leak

diff --git a/lib/krb5/fast.c b/lib/krb5/fast.c
index 7da456ce6ed91ecd8430b41ec5e6830d1bac893d..338c4facfcca86205ea8b1df6ef18b962ce48824 100644 (file)
--- a/lib/krb5/fast.c
+++ b/lib/krb5/fast.c
@@ -883,7 +883,7 @@ _krb5_fast_anon_pkinit_step(krb5_context context,
        ret = krb5_make_principal(context, &principal, realm,
                                  KRB5_WELLKNOWN_NAME, KRB5_ANON_NAME, NULL);
        if (ret)
-           return ret;
+           goto out;
 
        ret = krb5_get_init_creds_opt_set_pkinit(context,
                                                 state->anon_pkinit_opt,