From e9dd757763c76402e07f533f19e269eeebc554fa Mon Sep 17 00:00:00 2001
From: Alexander Bokovoy <abokovoy@redhat.com>
Date: Thu, 28 Nov 2019 17:50:18 +0200
Subject: [PATCH] covscan: free ucs2-encoded password copy when generating NTLM
 hash

On successful code path we leak internal copy of the ucs2-encoded
password.

Fixes: https://pagure.io/freeipa/issue/8131
Signed-off-by: Alexander Bokovoy <abokovoy@redhat.com>
Reviewed-By: Florence Blanc-Renaud <frenaud@redhat.com>
---
 util/ipa_pwd_ntlm.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/util/ipa_pwd_ntlm.c b/util/ipa_pwd_ntlm.c
index 263816dc5..5ec57ebca 100644
--- a/util/ipa_pwd_ntlm.c
+++ b/util/ipa_pwd_ntlm.c
@@ -103,6 +103,7 @@ int encode_nt_key(char *newPasswd, uint8_t *nt_key)
     }
 
     ret = 0;
+    free(ucs2Passwd);
 
 done:
     return ret;