From 48fdf4b80af4960e10ab4d53917bce224e023871 Mon Sep 17 00:00:00 2001
From: Jakub Jelen <jjelen@redhat.com>
Date: Wed, 7 Jan 2026 13:20:29 +0100
Subject: [PATCH] gssapi: Avoid possible memory leak on error condition

Thanks coverity!

CID 1643999

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
---
 src/gssapi.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gssapi.c b/src/gssapi.c
index c5e907d4..e789e53a 100644
--- a/src/gssapi.c
+++ b/src/gssapi.c
@@ -1405,10 +1405,10 @@ SSH_PACKET_CALLBACK(ssh_packet_userauth_gssapi_token_client)
     input_token.value = ssh_string_data(token);
     maj_stat =
         ssh_gssapi_init_ctx(session->gssapi, &input_token, &output_token, NULL);
+    SSH_STRING_FREE(token);
     if (GSS_ERROR(maj_stat)) {
         goto error;
     }
-    SSH_STRING_FREE(token);
 
     if (output_token.length != 0) {
         hexa = ssh_get_hexa(output_token.value, output_token.length);