[krbdev.mit.edu #8498] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Fri Sep 23 13:03:26 EDT 2016
Fix unlikely leak in KDC AS-REQ error path
In prepare_error_as(), if krb5_us_timeofday() fails and error pa-data
was supplied, the FAST cookie and a shallow copy of the error padata
can be leaked. Reported by Will Fiveash.
https://github.com/krb5/krb5/commit/8d852c577039d59e1bea383e4ddfe575c20f240d
Author: Greg Hudson <ghudson at mit.edu>
Commit: 8d852c577039d59e1bea383e4ddfe575c20f240d
Branch: master
src/kdc/do_as_req.c | 2 +-
1 files changed, 1 insertions(+), 1 deletions(-)
More information about the krb5-bugs
mailing list