1 files changed, 7 insertions, 2 deletions

diff --git a/shared.c b/shared.c
index d7b2d5a..a27ab30 100644
--- a/shared.c
+++ b/shared.c
@@ -393,25 +393,30 @@ int cgit_close_filter(struct cgit_filter *filter)
         if (WIFEXITED(filter->exitstatus) && !WEXITSTATUS(filter->exitstatus))
                 return 0;
         die("Subprocess %s exited abnormally", filter->cmd);
 }
 
 /* Read the content of the specified file into a newly allocated buffer,
  * zeroterminate the buffer and return 0 on success, errno otherwise.
  */
 int readfile(const char *path, char **buf, size_t *size)
 {
         int fd;
         struct stat st;
 
         fd = open(path, O_RDONLY);
         if (fd == -1)
                 return errno;
-        if (fstat(fd, &st))
+        if (fstat(fd, &st)) {
+                close(fd);
                 return errno;
-        if (!S_ISREG(st.st_mode))
+        }
+        if (!S_ISREG(st.st_mode)) {
+                close(fd);
                 return EISDIR;
+        }
         *buf = xmalloc(st.st_size + 1);
         *size = read_in_full(fd, *buf, st.st_size);
         (*buf)[*size] = '\0';
+        close(fd);
         return (*size == st.st_size ? 0 : errno);
 }