[krbdev.mit.edu #8697] git commit

Greg Hudson via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue Jun 19 11:00:34 EDT 2018


Fix minor leak in krb5_gss_inquire_cred()

If mechs is created but one of the generic_gss_add_oid_set_member()
calls fails, it leaks.  Initialize mechs and free it in the fail
label.  Also null mechs when we transfer ownership of it to the
caller, in case we later unify the success and failure exit paths.
Reported by Bean Zhang.

https://github.com/krb5/krb5/commit/46972c0664b7cfd70c40370c22e604efc0225e14
Author: Greg Hudson <ghudson at mit.edu>
Commit: 46972c0664b7cfd70c40370c22e604efc0225e14
Branch: master
 src/lib/gssapi/krb5/inq_cred.c |    7 +++++--
 1 files changed, 5 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list