diff --git a/library/rsa.c b/library/rsa.c
index e171afa..6b034c6 100644
--- a/library/rsa.c
+++ b/library/rsa.c
@@ -1204,6 +1204,7 @@
     if( expected_salt_len != RSA_SALT_LEN_ANY &&
         slen != (size_t) expected_salt_len )
     {
+        md_free_ctx( &md_ctx );
         return( POLARSSL_ERR_RSA_INVALID_PADDING );
     }