security: don't leak a file descriptor

CID 131305 (#1 of 1): Resource leak (RESOURCE_LEAK)
20. leaked_storage: Variable f going out of scope leaks the storage it points to.

CID 131304 (#1 of 1): Resource leak (RESOURCE_LEAK)
16. leaked_storage: Variable f going out of scope leaks the storage it points to.

CID 131302 (#1 of 1): Resource leak (RESOURCE_LEAK)
14. leaked_handle: Handle variable fd going out of scope leaks the handle.

CID 131301 (#1 of 1): Dereference null return value (NULL_RETURNS)
4. dereference: Dereferencing a pointer that might be null f when calling fscanf

src/ct.c

@@ -1012,7 +1012,8 @@ static ct_process_t __local_enter_cb(ct_handler_t h, ct_process_desc_t ph, int (
 	return &pr->h;
 err:
 	xfree(pr);
-	close(wait_sock);
+	if (wait_sock >= 0)
+		close(wait_sock);
 	if (pid > 0)
 		waitpid(pid, NULL, 0);
 	return ERR_PTR(-1);

src/security.c

@@ -213,6 +213,7 @@ static int libct_getpwnam(char *user, char *buf, size_t buflen, struct passwd *r
 		xfree(gecos);
 		xfree(home);
 		xfree(shell);
+		fclose(f);
 		return 0;
 	}