diff --git a/sm/ChangeLog b/sm/ChangeLog
index 98f9a4e7a..84fe6c3c0 100644
--- a/sm/ChangeLog
+++ b/sm/ChangeLog
@@ -1,3 +1,7 @@
+2006-12-21  Marcus Brinkmann  <marcus@g10code.de>
+
+	* encrypt.c (encrypt_dek): Release S_CIPH.
+
 2006-12-20  Marcus Brinkmann  <marcus@g10code.de>
 
 	* server.c (gpgsm_server): Release CTRL->server_local.
diff --git a/sm/encrypt.c b/sm/encrypt.c
index 8876bcd0e..056599a64 100644
--- a/sm/encrypt.c
+++ b/sm/encrypt.c
@@ -223,6 +223,7 @@ encrypt_dek (const DEK dek, ksba_cert_t cert, unsigned char **encval)
     }
   len = gcry_sexp_sprint (s_ciph, GCRYSEXP_FMT_CANON, (char*)buf, len);
   assert (len);
+  gcry_sexp_release (s_ciph);
 
   *encval = buf;
   return 0;
diff --git a/sm/gpgsm.c b/sm/gpgsm.c
index 2439c55e6..4ad0ccff3 100644
--- a/sm/gpgsm.c
+++ b/sm/gpgsm.c
@@ -28,7 +28,7 @@
 #include <ctype.h>
 #include <unistd.h>
 #include <fcntl.h>
-
+#include <mcheck.h>
 
 #include "gpgsm.h"
 #include <gcrypt.h>
@@ -744,6 +744,7 @@ main ( int argc, char **argv)
   certlist_t signerlist = NULL;
   int do_not_setup_keys = 0;
 
+  mtrace();
 
   /* trap_unaligned ();*/
   set_strusage (my_strusage);