[krbdev.mit.edu #8759] Resource leak in kadm5_randkey_principal_3()

Bean Zhang via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Thu Oct 25 12:00:25 EDT 2018


Hi Team,

In kadm5_randkey_principal_3() of krb5-1.16.1/src/lib/kadm5/srv/svr_principal.c,
when call apply_keysalt_policy(), it will allocate memory for pointer new_ks_tuple,
but later if keepold is not zero, it just return KADM5_PROTECT_PRINCIPAL without free new_ks_tuple.

Could someone help to take a look?

Thanks,
Bean




More information about the krb5-bugs mailing list