[krbdev.mit.edu #8271] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Oct 26 18:19:18 EDT 2015


Zap secure cookie contents when freeing

Secure cookies are intended to hold secret values which may contribute
to key data, and therefore should be sanitized when released.  Also
fix a memory leak in kdc_fast_make_cookie().

https://github.com/krb5/krb5/commit/73f0ee229fdd2e888bdefe580bb183d2a6c57365
Author: Greg Hudson <ghudson at mit.edu>
Commit: 73f0ee229fdd2e888bdefe580bb183d2a6c57365
Branch: master
 src/include/k5-int.h         |    3 +++
 src/kdc/fast_util.c          |   12 ++++++++----
 src/lib/krb5/krb/kfree.c     |   16 +++++++++++++++-
 src/lib/krb5/libkrb5.exports |    1 +
 4 files changed, 27 insertions(+), 5 deletions(-)



More information about the krb5-bugs mailing list