memleak in gss_add_cred_with_password in krb 1.12.1 and 1.13.1

Sorin Manolache sorinm at gmail.com
Thu Jun 18 12:13:40 EDT 2015


Hello,

I think I've found a memory leak in gss_add_cred_with_password, in krb5 
1.12.1 and 1.13.1.

The gss_OID_set target_mechs in gss_add_cred_with_password 
(lib/gssapi/mechglue/g_acquire_cred_with_pw.c) is not released if the 
function returns GSS_S_COMPLETE.

Sorin


More information about the krbdev mailing list