diff --git a/lib/getdef.c b/lib/getdef.c
index a2a7e484..763d847a 100644
--- a/lib/getdef.c
+++ b/lib/getdef.c
@@ -522,6 +522,8 @@ static void def_load (void)
 		 * syslog. The tools will just use their default values.
 		 */
 		(void)putdef_str (keys[i], value);
+
+		free(value);
 	}
 
 	econf_free (keys);
diff --git a/src/chsh.c b/src/chsh.c
index d6eca6e3..87aa4cb7 100644
--- a/src/chsh.c
+++ b/src/chsh.c
@@ -180,6 +180,7 @@ static bool shell_is_listed (const char *sh)
 			break;
 		}
 	}
+	econf_free (keys);
 	econf_free (key_file);
 
 	return found;