[krbdev.mit.edu #8584] git commit 
    Greg Hudson via RT 
    rt-comment at krbdev.mit.edu
       
    Wed May 24 14:59:33 EDT 2017
    
    
  
Free GSS checksum data deterministically
In the normal course of execution, md5.contents allocated by
kg_checksum_channel_bindings() in make_ap_req_v1() is freed in
make_gss_checksum().  But when there is a failure in
krb5_mk_req_extended() or in make_gss_checksum() before free is
called, the memory leaks.
This patch frees the memory unconditionally in make_ap_req_v1().
https://github.com/krb5/krb5/commit/29337e7c7b796685fb6a03466d32147e17aa2d16
Author: Tomas Kuthan <tkuthan at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 29337e7c7b796685fb6a03466d32147e17aa2d16
Branch: master
 src/lib/gssapi/krb5/init_sec_context.c |    4 +---
 1 files changed, 1 insertions(+), 3 deletions(-)
    
    
More information about the krb5-bugs
mailing list