Ah I see - so I think `*output = tmp` should be moved to L884 after the check for the `realloc` call, to avoid a leak for the case that `ssh_mac_ctx_init` fails.