From b8dee97ed3fe21f4db0d20a1c2e7bdd18c920ee6 Mon Sep 17 00:00:00 2001
From: Georgia Garcia <georgia.garcia@canonical.com>
Date: Mon, 4 Aug 2025 18:54:36 -0300
Subject: [PATCH] parser: fix leaking name in variable expansion

Fixes: https://gitlab.com/apparmor/apparmor/-/issues/533
Signed-off-by: Georgia Garcia <georgia.garcia@canonical.com>
---
 parser/variable.cc | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/parser/variable.cc b/parser/variable.cc
index 5f535d5f1..c17d7e2c6 100644
--- a/parser/variable.cc
+++ b/parser/variable.cc
@@ -307,6 +307,7 @@ int variable::expand_variable()
 		}
 		name = variable::process_var(var.c_str());
 		variable *ref = symtab::lookup_existing_symbol(name);
+		free(name);
 		if (!ref) {
 			PERROR("Failed to find declaration for: %s\n", var.c_str());
 			rc = 1;
@@ -336,7 +337,6 @@ int variable::expand_variable()
 	}
 
 out:
-	free(name);
 	expanding = false;
 	return rc;
 }