[krbdev.mit.edu #6863] SVN Commit 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Tue Mar  8 14:34:32 EST 2011
    
    
  
SPNEGO's accept_sec_context and init_sec_context produce a null context
on error, so it needs to silently succeed when deleting a null context.
It was instead passing the null context along to the mechglue which
would produce an error, causing a leak of the mechglue's union context
wrapper.  Reported by aberry at likewise.com.
http://src.mit.edu/fisheye/changelog/krb5/?cs=24692
Commit By: ghudson
Revision: 24692
Changed Files:
U   trunk/src/lib/gssapi/spnego/spnego_mech.c
    
    
More information about the krb5-bugs
mailing list