[krbdev.mit.edu #8439] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed Aug 10 13:51:38 EDT 2016


Fix leak in gss_display_name() for non-MN names

RFC 2744 states that the gss_display_name() output_name_type result is
"a pointer into static storage, and should be treated as read-only by
the caller (in particular, the application should not attempt to free
it)".  For non-mechanism names, we were making a copy of the name type
from the union name structure, causing a memory leak; stop doing that.

https://github.com/krb5/krb5/commit/20fcbf2cb820df0d31e66bb11f64fb50a31008f5
Author: Greg Hudson <ghudson at mit.edu>
Commit: 20fcbf2cb820df0d31e66bb11f64fb50a31008f5
Branch: master
 src/lib/gssapi/mechglue/g_dsp_name.c |   27 ++++-----------------------
 1 files changed, 4 insertions(+), 23 deletions(-)



More information about the krb5-bugs mailing list