[krbdev.mit.edu #8584] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Wed May 24 14:59:33 EDT 2017


Free GSS checksum data deterministically

In the normal course of execution, md5.contents allocated by
kg_checksum_channel_bindings() in make_ap_req_v1() is freed in
make_gss_checksum().  But when there is a failure in
krb5_mk_req_extended() or in make_gss_checksum() before free is
called, the memory leaks.

This patch frees the memory unconditionally in make_ap_req_v1().

https://github.com/krb5/krb5/commit/29337e7c7b796685fb6a03466d32147e17aa2d16
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 29337e7c7b796685fb6a03466d32147e17aa2d16
Branch: master
 src/lib/gssapi/krb5/init_sec_context.c |    4 +---
 1 files changed, 1 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list