diff --git a/.gitignore b/.gitignore
index 45010be0f..fe0d5f4aa 100644
--- a/.gitignore
+++ b/.gitignore
@@ -78,3 +78,5 @@ Release
 CMakeFiles
 CMakeCache.txt
 cmake_install.cmake
+_codeql_build_dir/
+_codeql_detected_source_root
diff --git a/hconfig.h b/hconfig.h
index 03d4ef2f1..c1e5d8a4d 100644
--- a/hconfig.h
+++ b/hconfig.h
@@ -10,7 +10,7 @@
 #endif
 
 #ifndef HAVE_STDATOMIC_H
-#define HAVE_STDATOMIC_H 0
+#define HAVE_STDATOMIC_H 1
 #endif
 
 #ifndef HAVE_SYS_TYPES_H
@@ -62,15 +62,15 @@
 #endif
 
 #ifndef HAVE_PTHREAD_SPIN_LOCK
-#define HAVE_PTHREAD_SPIN_LOCK 0
+#define HAVE_PTHREAD_SPIN_LOCK 1
 #endif
 
 #ifndef HAVE_PTHREAD_MUTEX_TIMEDLOCK
-#define HAVE_PTHREAD_MUTEX_TIMEDLOCK 0
+#define HAVE_PTHREAD_MUTEX_TIMEDLOCK 1
 #endif
 
 #ifndef HAVE_SEM_TIMEDWAIT
-#define HAVE_SEM_TIMEDWAIT 0
+#define HAVE_SEM_TIMEDWAIT 1
 #endif
 
 #ifndef HAVE_PIPE
@@ -96,7 +96,7 @@
 /* #undef ENABLE_UDS */
 /* #undef USE_MULTIMAP */
 
-#define WITH_WEPOLL     1
+/* #undef WITH_WEPOLL */
 /* #undef WITH_KCP */
 
 #endif // HV_CONFIG_H_
diff --git a/ssl/wintls.c b/ssl/wintls.c
index 2366fef57..0864d50ab 100644
--- a/ssl/wintls.c
+++ b/ssl/wintls.c
@@ -186,6 +186,7 @@ void hssl_ctx_free(hssl_ctx_t ssl_ctx)
     if (sec_status != SEC_E_OK) {
         printe("free_cred_handle FreeCredentialsHandle %d\n", sec_status);
     }
+    free(ssl_ctx);
 }
 
 static void init_sec_buffer(SecBuffer* secure_buffer, unsigned long type, unsigned long len, void* buffer)