[krbdev.mit.edu #8701] Resource leak in kr_remote_send()

Bean Zhang via RT rt-comment at KRBDEV-PROD-APP-1.mit.edu
Tue Jun 19 11:26:25 EDT 2018


Hi Team,

In kr_remote_send() of krb5-1.16.1/src/lib/krad/remote.c,
When calls request_new(), will store the allocated memory to r,
later if remote_add_flags() fails, will goto error label,
then this function returns without freeing the memory that r points to.

The fix is to call "request_free(r)" when run into error label.

Could someone help to take a look?

Thanks,
Bean



More information about the krb5-bugs mailing list