--- lib/gssapi/ntlm/acquire_cred.c	2018-09-16 13:41:20.000000000 +1000
+++ lib/gssapi/ntlm/acquire_cred.c	2018-09-16 13:46:16.000000000 +1000
@@ -58,8 +58,10 @@ 
     if (cred_usage == GSS_C_BOTH || cred_usage == GSS_C_ACCEPT) {
 
 	maj_stat = _gss_ntlm_allocate_ctx(min_stat, &ctx);
-	if (maj_stat != GSS_S_COMPLETE)
+	if (maj_stat != GSS_S_COMPLETE) {
+            if (ctx) free(ctx);
 	    return maj_stat;
+        }
 
         domain = name != NULL ? name->domain : NULL;
 	maj_stat = (*ctx->server->nsi_probe)(min_stat, ctx->ictx, domain);