From 34353312aa81f0e0e3bdae9e8ade1c6755d61faf Mon Sep 17 00:00:00 2001
From: David Levine <david.levine@gonift.com>
Date: Mon, 30 May 2016 11:49:20 -0400
Subject: [PATCH] Plugged leak in mh_oauth_cred_load().

---
 sbr/oauth.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/sbr/oauth.c b/sbr/oauth.c
index 57d4bbba..b3e47a93 100644
--- a/sbr/oauth.c
+++ b/sbr/oauth.c
@@ -954,6 +954,9 @@ mh_oauth_cred_load(FILE *fp, mh_oauth_ctx *ctx, const char *user)
         free(creds[i].user);
     }
 
+    /* No longer need user_creds.  result just uses its creds member. */
+    free(user_creds);
+
     if (result == NULL) {
         set_err_details(ctx, MH_OAUTH_CRED_USER_NOT_FOUND, user);
         return NULL;
-- 
2.56.0