diff --git a/lib/vauth/digest.c b/lib/vauth/digest.c
index 1bbed79392..9609390387 100644
--- a/lib/vauth/digest.c
+++ b/lib/vauth/digest.c
@@ -809,8 +809,10 @@ static CURLcode auth_create_digest_http_message(
     char *hashthis2;
 
     result = hash(hashbuf, (const unsigned char *)"", 0);
-    if(result)
+    if(result) {
+      curlx_free(hashthis);
       goto oom;
+    }
     convert_to_ascii(hashbuf, (unsigned char *)hashed);
 
     hashthis2 = curl_maprintf("%s:%s", hashthis, hashed);