[krbdev.mit.edu #8645] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Wed May 2 01:25:36 EDT 2018


Fix KDC encrypting key memory leak on some errors

Commit 0ba5ccd7bb3ea15e44a87f84ca6feed8890f657d separated the
allocation and destruction of encrypting_key, causing it to leak when
any of the intervening calls jump to the cleanup label.  Currently the
leak manifests on transited or authdata failures.  Move encrypting_key
destruction to the cleanup label so that it can't leak.  Reported by
anedvedicky at gmail.com.

(cherry picked from commit 1bcf2742d504a22b7354251bbc1e19c3dacd95f3)

https://github.com/krb5/krb5/commit/9377ef950a487757e0ecb15e53537218950747c4
Author: Greg Hudson <ghudson at mit.edu>
Commit: 9377ef950a487757e0ecb15e53537218950747c4
Branch: krb5-1.16
 src/kdc/do_tgs_req.c |    5 +++--
 1 files changed, 3 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list