Fix NTLM authentication memory leak on SSPI enabled Windows builds

3 files changed, 7 insertions, 4 deletions

diff --git a/CHANGES b/CHANGES
index 8176b8a29..57e7eec5d 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,6 +6,10 @@
 
                                   Changelog
 
+Yang Tse (5 Mar 2009)
+- Fixed NTLM authentication memory leak on SSPI enabled Windows builds. This
+  issue was noticed by Chris Deidun.
+
 Daniel Fandrich (4 Mar 2009)
 - Fixed a problem with m4 quoting in the OpenSSL configure check reported
   by Daniel Johnson.
diff --git a/RELEASE-NOTES b/RELEASE-NOTES
index 2dc9daf81..4398cce85 100644
--- a/RELEASE-NOTES
+++ b/RELEASE-NOTES
@@ -14,7 +14,7 @@ This release includes the following changes:
 
 This release includes the following bugfixes:
 
- o 
+ o NTLM authentication memory leak on SSPI enabled Windows builds
 
 This release includes the following known bugs:
 
@@ -23,6 +23,6 @@ This release includes the following known bugs:
 This release would not have looked like this without help, code, reports and
 advice from friends like these:
 
- David James
+ David James, Chris Deidun
 
         Thanks! (and sorry if I forgot to mention someone)
diff --git a/lib/http_ntlm.c b/lib/http_ntlm.c
index 9742e196d..e1141f310 100644
--- a/lib/http_ntlm.c
+++ b/lib/http_ntlm.c
@@ -303,9 +303,8 @@ CURLntlm Curl_input_ntlm(struct connectdata *conn,
         fprintf(stderr, "\n****\n");
         fprintf(stderr, "**** Header %s\n ", header);
       });
-
-      free(buffer);
 #endif
+      free(buffer);
     }
     else {
       if(ntlm->state >= NTLMSTATE_TYPE1)