git: 5c2d3093b27f - main - pfctl: Plug leak in error case of the common 'varset' implementations.

[Kristof Provost]

The branch main has been updated by kp:

URL: 
https://cgit.FreeBSD.org/src/commit/?id=5c2d3093b27fbea6501c2fb345a293bd4f524f75

commit 5c2d3093b27fbea6501c2fb345a293bd4f524f75
Author:     Kristof Provost <k...@freebsd.org>
AuthorDate: 2025-06-23 09:54:54 +0000
Commit:     Kristof Provost <k...@freebsd.org>
CommitDate: 2025-06-26 13:11:01 +0000

    pfctl: Plug leak in error case of the common 'varset' implementations.
    
    ok benno@
    
    Obtained from:  OpenBSD, krw <k...@openbsd.org>, 16a0a9064f
    Sponsored by:   Rubicon Communications, LLC ("Netgate")
---
 sbin/pfctl/parse.y | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/sbin/pfctl/parse.y b/sbin/pfctl/parse.y
index 1bd8e2bb55ad..e0bd5ce4aee0 100644
--- a/sbin/pfctl/parse.y
+++ b/sbin/pfctl/parse.y
@@ -902,6 +902,8 @@ varset              : STRING '=' varstring  {
                                if (isspace((unsigned char)*s)) {
                                        yyerror("macro name cannot contain "
                                           "whitespace");
+                                       free($1);
+                                       free($3);
                                        YYERROR;
                                }
                        }