[krbdev.mit.edu #6863] SVN Commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Tue Mar 8 14:34:32 EST 2011
SPNEGO's accept_sec_context and init_sec_context produce a null context
on error, so it needs to silently succeed when deleting a null context.
It was instead passing the null context along to the mechglue which
would produce an error, causing a leak of the mechglue's union context
wrapper. Reported by aberry at likewise.com.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24692
Commit By: ghudson
Revision: 24692
Changed Files:
U trunk/src/lib/gssapi/spnego/spnego_mech.c
More information about the krb5-bugs
mailing list