Module Name:	krb5
Committed By:	hartmans
Date:		Tue Sep 21 20:39:19 UTC 2004

Modified Files:
	 krb5/src/lib/crypto/arcfour/ChangeLog
		krb5/src/lib/crypto/arcfour/string_to_key.c
Added Files:

Removed Files:


Log Message
ticket: new
Subject: memory leak in arcfour string_to_key
requestors: schommer@gmail.com

Derrick Schommer reports that arcfour's string_to_key function leaks
memory.  This is true; it copies the password to convert to utf16 and
never frees the copy.  It does memset the copy to 0 when done.


To generate a diff of this commit:
	cvs diff -r1.21 -r1.22 krb5/src/lib/crypto/arcfour/ChangeLog
	cvs diff -r1.6 -r1.7 krb5/src/lib/crypto/arcfour/string_to_key.c