From 0a9445a7c1af00f07c598f44b2c0d99be3a09b52 Mon Sep 17 00:00:00 2001
From: Tobias Brunner <tobias@strongswan.org>
Date: Fri, 19 Jun 2026 18:18:35 +0200
Subject: [PATCH] pt-tls-server: Fix leak if SASL authentication failed

---
 src/libpttls/pt_tls_server.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/libpttls/pt_tls_server.c b/src/libpttls/pt_tls_server.c
index 8e4185007..d33a36212 100644
--- a/src/libpttls/pt_tls_server.c
+++ b/src/libpttls/pt_tls_server.c
@@ -152,6 +152,7 @@ static status_t process_sasl(private_pt_tls_server_t *this,
 			writer->write_uint8(writer, PT_TLS_SASL_RESULT_ABORT);
 			pt_tls_write(this->tls, PT_TLS_SASL_RESULT,
 						 this->identifier++, writer->get_buf(writer));
+			writer->destroy(writer);
 			return FAILED;
 	}
 }