From 140d43f0ce71c439c7fef50395ac4e182b65ec8a Mon Sep 17 00:00:00 2001
From: Syh-Xiong <82537176+Syh-Xiong@users.noreply.github.com>
Date: Fri, 9 Oct 2026 03:06:00 +0800
Subject: [PATCH]  fix leaks in pdb7_extract_msf_stream_directory() in
 librz/bin/pdb/pdb.c (#6850)

---
 librz/bin/pdb/pdb.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/librz/bin/pdb/pdb.c b/librz/bin/pdb/pdb.c
index 24e8f6b5e4..aabadfed2d 100644
--- a/librz/bin/pdb/pdb.c
+++ b/librz/bin/pdb/pdb.c
@@ -227,15 +227,18 @@ static RzPdbMsfStreamDirectory *pdb7_extract_msf_stream_directory(RzPdb *pdb) {
 
 	RzPdbMsfStreamDirectory *msd = RZ_NEW0(RzPdbMsfStreamDirectory);
 	if (!msd) {
+		rz_buf_free(sd);
 		goto error_memory;
 	}
 	if (!rz_buf_read_le32(sd, &msd->NumStreams)) {
+		rz_buf_free(sd);
 		RZ_FREE(msd);
 		goto error;
 	}
 	msd->StreamSizes = (ut32 *)malloc(msd->NumStreams * sizeof(ut32));
 	msd->sd = sd;
 	if (!msd->StreamSizes) {
+		rz_buf_free(msd->sd);
 		RZ_FREE(msd);
 		goto error_memory;
 	}
@@ -243,6 +246,8 @@ static RzPdbMsfStreamDirectory *pdb7_extract_msf_stream_directory(RzPdb *pdb) {
 	for (size_t i = 0; i < msd->NumStreams; i++) {
 		ut32 stream_size;
 		if (!rz_buf_read_le32(sd, &stream_size)) {
+			rz_buf_free(msd->sd);
+			RZ_FREE(msd->StreamSizes);
 			RZ_FREE(msd);
 			goto error;
 		}
@@ -258,6 +263,8 @@ static RzPdbMsfStreamDirectory *pdb7_extract_msf_stream_directory(RzPdb *pdb) {
 	ut32 msd_size = sizeof(ut32) + msd->NumStreams * sizeof(ut32) + total_blocks * sizeof(ut32);
 	if (msd_size != pdb->super_block->num_directory_bytes) {
 		RZ_LOG_ERROR("Error stream directory size.\n");
+		rz_buf_free(msd->sd);
+		RZ_FREE(msd->StreamSizes);
 		RZ_FREE(msd);
 		goto error;
 	}