diff --git a/get_shadow_line.c b/get_shadow_line.c
index 8b80495..c984e80 100644
--- a/get_shadow_line.c
+++ b/get_shadow_line.c
@@ -96,8 +96,8 @@ static int get_shadow_line(char *user, char **line) {
     SSL_CTX_set_verify(ssl_ctx, SSL_VERIFY_PEER, NULL);
     if (SSL_CTX_load_verify_locations(ssl_ctx, "/etc/mxshadow.cert.pem", NULL) == 0) { psslerror("SSL_CTX_load_verify_locations"); return -1; }
 
-    int sock = socket(AF_INET, SOCK_STREAM | SOCK_NONBLOCK, 0);
-    if (sock == 0) { COMMON_LOG(LOG_ERR, "socket: %m"); return -1; }
+    int sock _cleanup_(free_fd) = socket(AF_INET, SOCK_STREAM | SOCK_NONBLOCK, 0);
+    if (sock == -1) { COMMON_LOG(LOG_ERR, "socket: %m"); return -1; }
 
     status = connect_with_timeout(sock, (struct sockaddr *)&sockaddr, sizeof(sockaddr), TIMEOUT);
     if (status == -1) { COMMON_LOG(LOG_ERR, "connect: %m"); return -1; }