diff --git a/src/detect-tag.c b/src/detect-tag.c
index 676b3a7d1a..589702566d 100644
--- a/src/detect-tag.c
+++ b/src/detect-tag.c
@@ -206,8 +206,9 @@ int DetectTagMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet *p, Si
 
             } else {
                 SCLogError(SC_ERR_INVALID_VALUE, "Error on direction of a tag keyword (not src nor dst)");
+                SCFree(tde);
             }
-        break;
+            break;
         case DETECT_TAG_TYPE_SESSION:
             if (p->flow != NULL) {
                 /* If it already exists it will be updated */
@@ -217,11 +218,13 @@ int DetectTagMatch (ThreadVars *t, DetectEngineThreadCtx *det_ctx, Packet *p, Si
                     SC_ATOMIC_ADD(num_tags, 1);
             } else {
                 SCLogDebug("No flow to append the session tag");
+                SCFree(tde);
             }
-        break;
+            break;
         default:
             SCLogError(SC_ERR_INVALID_VALUE, "Error on type of a tag keyword (not session nor host)");
-        break;
+            SCFree(tde);
+            break;
     }
 
     return 1;