kdc: Fix leak on TGS referral

diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c
index d655217e310a7e676411ac49e11f2a44fe6f37c2..b4ae35f79bf9bb493aae5251975647591d558abf 100644 (file)
--- a/kdc/krb5tgs.c
+++ b/kdc/krb5tgs.c
@@ -1481,6 +1481,10 @@ tgs_build_reply(astgs_request_t priv,
      */
 
 server_lookup:
+    priv->server = NULL;
+    if (server)
+        _kdc_free_ent(context, server);
+    server = NULL;
     ret = _kdc_db_fetch(context, config, sp,
                         HDB_F_GET_SERVER | HDB_F_DELAY_NEW_KEYS | flags,
                        NULL, NULL, &server);