[krbdev.mit.edu #6863] SVN Commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Tue Mar 8 14:34:32 EST 2011


SPNEGO's accept_sec_context and init_sec_context produce a null context
on error, so it needs to silently succeed when deleting a null context.
It was instead passing the null context along to the mechglue which
would produce an error, causing a leak of the mechglue's union context
wrapper.  Reported by aberry at likewise.com.


http://src.mit.edu/fisheye/changelog/krb5/?cs=24692
Commit By: ghudson
Revision: 24692
Changed Files:
U   trunk/src/lib/gssapi/spnego/spnego_mech.c




More information about the krb5-bugs mailing list