[krbdev.mit.edu #8584] git commit
Greg Hudson via RT
rt-comment at krbdev.mit.edu
Mon Jul 17 22:41:29 EDT 2017
Free GSS checksum data deterministically
In the normal course of execution, md5.contents allocated by
kg_checksum_channel_bindings() in make_ap_req_v1() is freed in
make_gss_checksum(). But when there is a failure in
krb5_mk_req_extended() or in make_gss_checksum() before free is
called, the memory leaks.
This patch frees the memory unconditionally in make_ap_req_v1().
(cherry picked from commit 29337e7c7b796685fb6a03466d32147e17aa2d16)
https://github.com/krb5/krb5/commit/856ae7d866f7d89b367acf1b81118bf19e51a2e9
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 856ae7d866f7d89b367acf1b81118bf19e51a2e9
Branch: krb5-1.14
src/lib/gssapi/krb5/init_sec_context.c | 4 +---
1 files changed, 1 insertions(+), 3 deletions(-)
More information about the krb5-bugs
mailing list