[krbdev.mit.edu #8705] Resource leak in resolve_target_cache()

Bean Zhang via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Wed Jun 20 10:54:47 EDT 2018


Hi Team,

In resolve_target_cache() of krb5-1.16.1/src/clients/ksu/main.c,
When calls get_configured_defccname(), will store the allocated memory to target,
later if calling gen_sym() fails, this function returns without freeing the memory target points to.

The fix is to call "goto cleanup" instead of "return retval".

Could someone help to take a look?

Thanks,
Bean



More information about the krb5-bugs mailing list