From 84fc43842f75452eea50a832da2b4aa96c041789 Mon Sep 17 00:00:00 2001
From: Victor Julien <victor@inliniac.net>
Date: Wed, 4 Jul 2018 15:10:34 +0200
Subject: [PATCH] detect: fix memory leak in app-layer-event keyword

Bug #2515.
---
 src/detect-app-layer-event.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/detect-app-layer-event.c b/src/detect-app-layer-event.c
index 1cb3dbd7fd..e77f7576bf 100644
--- a/src/detect-app-layer-event.c
+++ b/src/detect-app-layer-event.c
@@ -285,6 +285,9 @@ static int DetectAppLayerEventSetupP2(Signature *s,
     if (DetectAppLayerEventParseAppP2((DetectAppLayerEventData *)sm->ctx, s->proto.proto,
                                       &event_type) < 0) {
         /* DetectAppLayerEventParseAppP2 prints errors */
+
+        /* sm has been removed from lists by DetectAppLayerEventPrepare */
+        SigMatchFree(sm);
         return -1;
     }
     SigMatchAppendSMToList(s, sm, g_applayer_events_list_id);