There's a leak in oauth1_config::_hmac_sha1 on Windows; around line 102, the function just does a 'return hash' rather than falling through to the cleanup section. This causes the alg_handle and hash_handle variables to be leaked.
↧