From bdabf25a5b83268e549a297ce19a2362148f8477 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Mon, 6 Mar 2023 12:18:34 +0100
Subject: [PATCH] gssapi: Free selected OID set on error paths (GHSL-2023-034)

Thanks Phil Turnbull from GitHub

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
---
 src/gssapi.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/gssapi.c b/src/gssapi.c
index 7e4ccaa6..5095136c 100644
--- a/src/gssapi.c
+++ b/src/gssapi.c
@@ -327,6 +327,7 @@ ssh_gssapi_handle_userauth(ssh_session session, const char *user,
     session->gssapi->mech.elements = malloc(oid.length);
     if (session->gssapi->mech.elements == NULL){
         ssh_set_error_oom(session);
+        gss_release_oid_set(&min_stat, &selected);
         return SSH_ERROR;
     }
     memcpy(session->gssapi->mech.elements, oid.elements, oid.length);