[krbdev.mit.edu #6899] SVN Commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Wed Apr 13 14:43:38 EDT 2011


Fix the sole case in process_chpw_request() where a return could occur
without allocating the data pointer in the response.  This prevents a
later free() of an invalid pointer in kill_tcp_or_rpc_connection().

Also initialize rep->data to NULL in process_chpw_request() and clean
up *response in dispatch() as an additional precaution.

http://src.mit.edu/fisheye/changelog/krb5/?cs=24878
Commit By: tlyu
Revision: 24878
Changed Files:
U   trunk/src/kadmin/server/schpw.c




More information about the krb5-bugs mailing list