[krbdev.mit.edu #9204] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Fri Apr 10 19:52:28 EDT 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9204 >


Fix memory leak in gss_acquire_cred_from()

If gss_acquire_cred_from() is used with the krb5 mech and the verify
option (added in commit adbf73c507f383380c55d2ba9fa1ad6f30545bec), and
verification fails, make sure to free the credential we obtained
before returning.  Reported by Evgeny Shemyakin.

https://github.com/krb5/krb5/commit/e7b4a2ae07a07cc337c6a62c502f6167c52dd16b
Author: Greg Hudson <ghudson at mit.edu>
Commit: e7b4a2ae07a07cc337c6a62c502f6167c52dd16b
Branch: master
 src/lib/gssapi/krb5/acquire_cred.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)



More information about the krb5-bugs mailing list