From cbb5544c451f0b104a7753d90c51f1237f6a4037 Mon Sep 17 00:00:00 2001
From: huanghuihui0904 <625173@qq.com>
Date: Mon, 9 Mar 2026 14:39:44 +0800
Subject: [PATCH] digest: fix memory leak in auth_create_digest_http_message()

Signed-off-by: huanghuihui0904 <625173@qq.com>

Closes #20862
---
 lib/vauth/digest.c | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/lib/vauth/digest.c b/lib/vauth/digest.c
index 1bbed79392..9609390387 100644
--- a/lib/vauth/digest.c
+++ b/lib/vauth/digest.c
@@ -809,8 +809,10 @@ static CURLcode auth_create_digest_http_message(
     char *hashthis2;
 
     result = hash(hashbuf, (const unsigned char *)"", 0);
-    if(result)
+    if(result) {
+      curlx_free(hashthis);
       goto oom;
+    }
     convert_to_ascii(hashbuf, (unsigned char *)hashed);
 
     hashthis2 = curl_maprintf("%s:%s", hashthis, hashed);