[krbdev.mit.edu #5629] gss_init_sec_context does not release output token buffer when used with spnego mech

Tom Yu via RT rt-comment at krbdev.mit.edu
Tue Aug 7 16:15:11 EDT 2007


Please try the following patch and let us know if it resolves the
output token buffer leak.

Index: src/lib/gssapi/spnego/spnego_mech.c
===================================================================
--- src/lib/gssapi/spnego/spnego_mech.c	(revision 19756)
+++ src/lib/gssapi/spnego/spnego_mech.c	(revision 19757)
@@ -835,6 +835,7 @@
 			ret = GSS_S_FAILURE;
 		}
 	}
+	gss_release_buffer(tmpmin, &mechtok_out);
 	if (ret == GSS_S_COMPLETE) {
 		/*
 		 * Now, switch the output context to refer to the





More information about the krb5-bugs mailing list