[krbdev.mit.edu #9189] git commit

Greg Hudson via RT rt at krbdev.mit.edu
Tue Jan 27 23:49:07 EST 2026


<URL: https://krbdev.mit.edu/rt/Ticket/Display.html?id=9189 >


Fix krb5 gss_acquire_cred() leak on some errors

When a krb5 acceptor cred is acquired with a specified name, a late
enough failure can leak the acceptor_mprinc field.  Fix this leak by
freeing the field in the acquire_cred_context() error_out cleanup
code.

[ghudson at mit.edu: rewrote commit message]

(cherry picked from commit a6512164a71ca2ade20d1cf3bf89b3973092eb48)

https://github.com/krb5/krb5/commit/03b856d7a6abfcecf27ad81922178bcd57ce415f
Author: benpope81 <benpope81 at gmail.com>
Committer: Greg Hudson <ghudson at mit.edu>
Commit: 03b856d7a6abfcecf27ad81922178bcd57ce415f
Branch: krb5-1.22
 src/lib/gssapi/krb5/acquire_cred.c | 1 +
 1 file changed, 1 insertion(+)



More information about the krb5-bugs mailing list