[krbdev.mit.edu #6752] CloseHandle() calls in cc_mslsa.c should be changed to LsaDeregisterLogonProcess()

Jamie Kirkpatrick via RT rt-comment at krbdev.mit.edu
Mon Jul 19 17:47:10 EDT 2010


I've just tracked down a crasher in cc_msla.c: the code calls
LsaConnectUntrusted() to obtain a connection to the LSA server which returns
a HANDLE instance.  Unfortunately, the wrong routine is used to free this
handle after it has been used: see here -
http://msdn.microsoft.com/en-us/library/aa378265(v=VS.85).aspx.

Need to replace calls to CloseHandle() with calls
to LsaDeregisterLogonProcess() to fix the issue.

-- 
Jamie Kirkpatrick
07818 422311




More information about the krb5-bugs mailing list