I have noticed a memory leak located in http_ntlm.c with USE_WINDOWS_SSPI defined ( I am using version 7.19.4 ). The buffer that is allocated on line 270 is never freed when USE_WINDOWS_SSPI is defined.

I believe the fix is that line 307 ( free(buffer); ) should be moved after the #endif statement.

So Lines 307-308 should be changed from:

      free(buffer);
#endif

to:

#endif
      free(buffer);

--
Cheers,
Chris