[krbdev.mit.edu #8439] git commit

Tom Yu via RT rt-comment at krbdev.mit.edu
Fri Sep 9 14:48:10 EDT 2016


Fix leak in gss_display_name() for non-MN names

RFC 2744 states that the gss_display_name() output_name_type result is
"a pointer into static storage, and should be treated as read-only by
the caller (in particular, the application should not attempt to free
it)".  For non-mechanism names, we were making a copy of the name type
from the union name structure, causing a memory leak; stop doing that.

(cherry picked from commit 20fcbf2cb820df0d31e66bb11f64fb50a31008f5)

https://github.com/krb5/krb5/commit/7dd659b97df5799d429b8afcbb0b6b804d3feabf
Author: Greg Hudson <ghudson at mit.edu>
Committer: Tom Yu <tlyu at mit.edu>
Commit: 7dd659b97df5799d429b8afcbb0b6b804d3feabf
Branch: krb5-1.13
 src/lib/gssapi/mechglue/g_dsp_name.c |   27 ++++-----------------------
 1 files changed, 4 insertions(+), 23 deletions(-)



More information about the krb5-bugs mailing list