[krbdev.mit.edu #6813] memory leak in gss_accept_sec_context

Arlene Berry via RT rt-comment at krbdev.mit.edu
Fri Oct 29 10:39:15 EDT 2010


The mechglue leaks the mechanism context when there's an error.

 

--- src/lib/gssapi/mechglue/g_accept_sec_context.c      (revision 24487)

+++ src/lib/gssapi/mechglue/g_accept_sec_context.c   (working copy)

@@ -353,6 +353,12 @@

                    free(union_ctx_id->mech_type);

                    *context_handle = GSS_C_NO_CONTEXT;

                }

+             if (union_ctx_id->internal_ctx_id) {

+                 mech->gss_delete_sec_context(

+                             &temp_minor_status,

+                             &union_ctx_id->internal_ctx_id,

+                             GSS_C_NO_BUFFER);

+             }

                free(union_ctx_id);

     }

 





More information about the krb5-bugs mailing list