- markus@cvs.openbsd.org 2003/09/01 20:44:54
     [auth2-gss.c]
     fix leak
diff --git a/ChangeLog b/ChangeLog
index 1aaa414..ae0b8d1 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -44,6 +44,9 @@
    - markus@cvs.openbsd.org 2003/09/01 18:15:50
      [readconf.c readconf.h servconf.c servconf.h ssh.c]
      remove unused kerberos code; ok henning@
+   - markus@cvs.openbsd.org 2003/09/01 20:44:54
+     [auth2-gss.c]
+     fix leak
 
 20030829
  - (bal) openbsd-compat/ clean up.  Considate headers, add in Id on our
@@ -959,4 +962,4 @@
  - Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
    Report from murple@murple.net, diagnosis from dtucker@zip.com.au
 
-$Id: ChangeLog,v 1.2932 2003/09/02 12:58:22 djm Exp $
+$Id: ChangeLog,v 1.2933 2003/09/02 12:59:01 djm Exp $
diff --git a/auth2-gss.c b/auth2-gss.c
index feb97d7..75b94b0 100644
--- a/auth2-gss.c
+++ b/auth2-gss.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: auth2-gss.c,v 1.2 2003/08/24 17:36:51 deraadt Exp $	*/
+/*	$OpenBSD: auth2-gss.c,v 1.3 2003/09/01 20:44:54 markus Exp $	*/
 
 /*
  * Copyright (c) 2001-2003 Simon Wilkinson. All rights reserved.
@@ -98,8 +98,10 @@
 		return (0);
 	}
 
-	if (GSS_ERROR(PRIVSEP(ssh_gssapi_server_ctx(&ctxt, &oid))))
+	if (GSS_ERROR(PRIVSEP(ssh_gssapi_server_ctx(&ctxt, &oid)))) {
+		xfree(doid);
 		return (0);
+	}
 
 	authctxt->methoddata=(void *)ctxt;