r24066: Fix memleak found by Volker. We don't leak keys now with MIT and Heimdal.

Guenther

diff --git a/source/libads/kerberos_verify.c b/source/libads/kerberos_verify.c
index 378258ee0877e6d8f4a007135d291cc42964e2b3..99288b78e5c6768d5850c67b35d221a4295ac59d 100644 (file)
--- a/source/libads/kerberos_verify.c
+++ b/source/libads/kerberos_verify.c
@@ -285,6 +285,7 @@ static krb5_error_code ads_secrets_verify_ticket(krb5_context context,
                if (ret == KRB5KRB_AP_ERR_TKT_NYV || 
                    ret == KRB5KRB_AP_ERR_TKT_EXPIRED ||
                    ret == KRB5KRB_AP_ERR_SKEW) {
+                       krb5_free_keyblock(context, key);
                        break;
                }