[krbdev.mit.edu #8584] git commit

Greg Hudson via RT rt-comment at krbdev.mit.edu
Mon Jul 17 22:41:29 EDT 2017


Free GSS checksum data deterministically

In the normal course of execution, md5.contents allocated by
kg_checksum_channel_bindings() in make_ap_req_v1() is freed in
make_gss_checksum().  But when there is a failure in
krb5_mk_req_extended() or in make_gss_checksum() before free is
called, the memory leaks.

This patch frees the memory unconditionally in make_ap_req_v1().

(cherry picked from commit 29337e7c7b796685fb6a03466d32147e17aa2d16)

https://github.com/krb5/krb5/commit/856ae7d866f7d89b367acf1b81118bf19e51a2e9
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 856ae7d866f7d89b367acf1b81118bf19e51a2e9
Branch: krb5-1.14
 src/lib/gssapi/krb5/init_sec_context.c |    4 +---
 1 files changed, 1 insertions(+), 3 deletions(-)



More information about the krb5-bugs mailing list