- markus@cvs.openbsd.org 2003/09/01 20:44:54

     [auth2-gss.c]
     fix leak

2 files changed, 8 insertions, 3 deletions

diff --git a/ChangeLog b/ChangeLog
index 1aaa41485..ae0b8d11d 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -44,6 +44,9 @@
    - markus@cvs.openbsd.org 2003/09/01 18:15:50
      [readconf.c readconf.h servconf.c servconf.h ssh.c]
      remove unused kerberos code; ok henning@
+   - markus@cvs.openbsd.org 2003/09/01 20:44:54
+     [auth2-gss.c]
+     fix leak
 
 20030829
  - (bal) openbsd-compat/ clean up.  Considate headers, add in Id on our
@@ -959,4 +962,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.2932 2003/09/02 12:58:22 djm Exp $
+$Id: ChangeLog,v 1.2933 2003/09/02 12:59:01 djm Exp $
diff --git a/auth2-gss.c b/auth2-gss.c
index feb97d7c3..75b94b009 100644
--- a/auth2-gss.c
+++ b/auth2-gss.c
@@ -1,4 +1,4 @@
-/*      $OpenBSD: auth2-gss.c,v 1.2 2003/08/24 17:36:51 deraadt Exp $   */
+/*      $OpenBSD: auth2-gss.c,v 1.3 2003/09/01 20:44:54 markus Exp $    */
 
 /*
  * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@@ -98,8 +98,10 @@ userauth_gssapi(Authctxt *authctxt)
                 return (0);
         }
 
-        if (GSS_ERROR(PRIVSEP(ssh_gssapi_server_ctx(&ctxt, &oid))))
+        if (GSS_ERROR(PRIVSEP(ssh_gssapi_server_ctx(&ctxt, &oid)))) {
+                xfree(doid);
                 return (0);
+        }
 
         authctxt->methoddata=(void *)ctxt;