From f5195ba442f2f1d16a0aa281d4b08bc72ae7e9bf Mon Sep 17 00:00:00 2001 From: "Roger A. Light" Date: Sun, 10 Mar 2024 15:08:37 +0000 Subject: [PATCH] Fix oss-fuzz 67324 Regression in unreleased version. --- common/password_mosq.c | 1 + 1 file changed, 1 insertion(+) diff --git a/common/password_mosq.c b/common/password_mosq.c index a99c3814..2092b933 100644 --- a/common/password_mosq.c +++ b/common/password_mosq.c @@ -456,6 +456,7 @@ static int pw__decode_sha512(struct mosquitto_pw *pw, const char *salt_password) free(sp_heap); if(rc != MOSQ_ERR_SUCCESS || password_len != HASH_LEN){ + free(password); return MOSQ_ERR_INVAL; } memcpy(pw->params.sha512.password_hash, password, password_len);