don't leak matchedDN

diff --git a/servers/slapd/back-ldap/search.c b/servers/slapd/back-ldap/search.c
index 45bc2e91528176b0d50b2b1efe8503bec151df06..8f33ae38f511d8363588aee81d5f87fba158e65e 100644 (file)
--- a/servers/slapd/back-ldap/search.c
+++ b/servers/slapd/back-ldap/search.c
@@ -431,6 +431,7 @@ fail:;
 
                if ( dnPretty( NULL, &match, &pmatch, op->o_tmpmemctx ) == LDAP_SUCCESS ) {
                        rs->sr_matched = pmatch.bv_val;
+                       LDAP_FREE( match.bv_val );
 
                } else {
                        rs->sr_matched = match.bv_val;