krb5 commit [krb5-1.13]: Fix KDC memory leak on failed S4U2Proxy requests

Tom Yu tlyu at mit.edu
Wed Apr 6 14:07:10 EDT 2016


https://github.com/krb5/krb5/commit/c16a6bb0de6b09319d8bb80b04c5bf87b31798f2
commit c16a6bb0de6b09319d8bb80b04c5bf87b31798f2
Author: Greg Hudson <ghudson at mit.edu>
Date:   Thu Feb 25 11:27:40 2016 -0500

    Fix KDC memory leak on failed S4U2Proxy requests
    
    Make sure to release stkt_server in process_tgs_req() if we fail
    before its disposition is determined.  Reported by Will Fiveash.
    
    (back ported from commit 194641a8ad7aecc6bc1d4848742c14569f14b900)
    
    ticket: 8363
    version_fixed: 1.13.5
    status: resolved
    tags: -pullup

 src/kdc/do_tgs_req.c |    1 +
 1 files changed, 1 insertions(+), 0 deletions(-)

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 48e822b..bb07978 100644
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -849,6 +849,7 @@ cleanup:
         kdc_free_rstate(state);
     krb5_db_free_principal(kdc_context, server);
     krb5_db_free_principal(kdc_context, krbtgt);
+    krb5_db_free_principal(kdc_context, stkt_server);
     krb5_db_free_principal(kdc_context, client);
     if (session_key.contents != NULL)
         krb5_free_keyblock_contents(kdc_context, &session_key);


More information about the cvs-krb5 mailing list