diff --git a/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c b/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c
index f6c946359fc7..32593db4a1b4 100644
--- a/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c
+++ b/security/jss/org/mozilla/jss/pkcs11/PK11KeyGenerator.c
@@ -256,9 +256,7 @@ finish:
     if( pbeCtxt ) {
         PBE_DestroyContext(pbeCtxt);
     }
-    if(keyBits) {
-        SECITEM_ZfreeItem(keyBits, PR_TRUE /*freeit*/);
-    }
+    /* keyBits == pbeCtxt, so we don't need to free it */
     return key;
 }