diff --git a/lib/libc/posix1e/acl_support_nfs4.c b/lib/libc/posix1e/acl_support_nfs4.c
--- a/lib/libc/posix1e/acl_support_nfs4.c
+++ b/lib/libc/posix1e/acl_support_nfs4.c
@@ -142,9 +142,10 @@
     int *try_compact)
 {
 	int i, found, ever_found = 0;
-	char *str, *flag;
+	char *str, *flag, *to_free;
 
 	str = strdup(strp);
+	to_free = str;
 	*try_compact = 0;
 	*var = 0;
 
@@ -166,12 +167,12 @@
 				    "invalid flag \"%s\"", flags_name, flag);
 			else
 				*try_compact = 1;
-			free(str);
+			free(to_free);
 			return (-1);
 		}
 	}
 
-	free(str);
+	free(to_free);
 	return (0);
 }