doc/CHANGES.txt

@@ -53,6 +53,8 @@ Zope Changes
 
     Bugs fixed
 
+      - Collector #1807: fixed memory leak in cAccessControl.guarded_getattr()
+
       - Collector #1852: fixed wrong URL construction in webdav.davcmds
 
       - Collector #1844: fixed whitespace handling in the ZMI "Find" tab

lib/python/AccessControl/cAccessControl.c

@@ -2198,7 +2198,10 @@ guarded_getattr(PyObject *inst, PyObject *name, PyObject *default_,
 
       t = aq_Acquire(inst, name, aq_validate, validate, 1, NULL, 0);
       if (t == NULL)
+        {
+        Py_DECREF(v);
         return NULL;
+        }
       Py_DECREF(t);
 
       return v;