On Mon, 25 Mar 2013, Arunav Sanyal wrote:

> Now i couldnt find any malloc calls anywhere which allocates memory to
> output_token.value anywhere.

How about http_negotiate.c:308 ?

You could also build libcurl with memory-debugging enabled and just check the
trace log...

> Please confirm this as a bug, or give me pointers in how to solve this
> issue.

I sounds like a bug to me. I'm just not convinced simply removing the free()
is the correct fix...

I've personally never built with spnego support and I'm not even sure I _can_
do it! Unfortunately we don't have any test cases for it either! :-(

-- 
  / daniel.haxx.se
-------------------------------------------------------------------
List admin: http://cool.haxx.se/list/listinfo/curl-library
Etiquette:  http://curl.haxx.se/mail/etiquette.html