From 8ba12766d1ceae6630eb2ecb6b75436391341d5f Mon Sep 17 00:00:00 2001
From: Huihui Huang <625173@qq.com>
Date: Thu, 26 Feb 2026 21:13:40 +0000
Subject: [PATCH] patch 9.2.0067: memory leak in dict_extend_func()

Problem:  memory leak in dict_extend_func()
Solution: Free d1 on early return (Huihui Huang)

closes: #19518

Signed-off-by: Huihui Huang <625173@qq.com>
Signed-off-by: Christian Brabandt <cb@256bit.org>
---
 src/dict.c    | 4 ++++
 src/version.c | 2 ++
 2 files changed, 6 insertions(+)

diff --git a/src/dict.c b/src/dict.c
index d83024a97f..85e451ec71 100644
--- a/src/dict.c
+++ b/src/dict.c
@@ -1370,7 +1370,11 @@ dict_extend_func(
 
     if (type != NULL && check_typval_arg_type(type, &argvars[1],
 							 func_name, 2) == FAIL)
+    {
+	if (is_new)
+	    dict_unref(d1);
 	return;
+    }
     dict_extend(d1, d2, action, func_name);
 
     if (is_new)
diff --git a/src/version.c b/src/version.c
index 6402b27b46..d6194a9801 100644
--- a/src/version.c
+++ b/src/version.c
@@ -734,6 +734,8 @@ static char *(features[]) =
 
 static int included_patches[] =
 {   /* Add new patch number below this line */
+/**/
+    67,
 /**/
     66,
 /**/