r11310: Free the 'if_relevent' portion of the PAC when we build it.

Andrew Bartlett
(This used to be commit ede638c00b574bf4149d11844c0adf8e0f5c4efb)

diff --git a/source4/heimdal/kdc/kerberos5.c b/source4/heimdal/kdc/kerberos5.c
index fdc60761f30bb39b99e8c5a3292d2253d4e3e7c2..1c02e66211d112d5f4a5bcc4cea827b3edf86ea1 100644 (file)
--- a/source4/heimdal/kdc/kerberos5.c
+++ b/source4/heimdal/kdc/kerberos5.c
@@ -1821,6 +1821,7 @@ tgs_make_reply(krb5_context context,
            if_relevant->val[0].ad_data.length = pac.length;
 
            ASN1_MALLOC_ENCODE(AuthorizationData, buf, buf_size, if_relevant, &len, ret);
+           free_AuthorizationData(if_relevant);
            
            auth_data = NULL;
            ALLOC(auth_data);