Fixup leaks in testing with ASAN

Author: stevegrubb

src/auditd-event.c

@@ -268,6 +268,9 @@ static void replace_event_msg(struct auditd_event *e, const char *buf)
 	if (buf) {
 		size_t len = strlen(buf);
 
+		if (e->reply.message != e->reply.msg.data)
+			free((void *)e->reply.message);
+
 		if (len < MAX_AUDIT_MESSAGE_LENGTH - 1)
 			e->reply.message = strdup(buf);
 		else {

src/test/format_event_test.c

@@ -54,7 +54,6 @@ int main(void)
 	format_event(e);
 	len_enriched = strlen(e->reply.message);
 	printf("ENRICHED: %s\n", e->reply.message);
-	cleanup_event(e);
 
 	//shutdown_events();
 	if (len_enriched <= len_raw) {
@@ -72,6 +71,7 @@ int main(void)
 		puts("missing AUID interpretation");
 		return 1;
 	}
+	cleanup_event(e);
 	return 0;
 }