[26247] in CVS-changelog-for-Kerberos-V5
svn rev #25587: branches/krb5-1-9/src/lib/krb5/krb/
daemon@ATHENA.MIT.EDU (tlyu@mit.edu)
Wed Dec 14 18:50:43 2011
Date: Wed, 14 Dec 2011 18:50:41 -0500
From: tlyu@mit.edu
Message-Id: <201112142350.pBENofHZ019055@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
http://src.mit.edu/fisheye/changelog/krb5/?cs=25587
Commit By: tlyu
Log Message:
ticket: 7052
version_fixed: 1.9.3
status: resolved
pull up r25536 from trunk
------------------------------------------------------------------------
r25536 | ghudson | 2011-12-09 12:57:52 -0500 (Fri, 09 Dec 2011) | 8 lines
ticket: 7049
subject: Fix subkey memory leak in krb5_get_credentials
target_version: 1.10
tags: pullup
If a get_credentials operation requires multiple TGS requests, we need
to free the subkey from previous requests before saving a new one.
Changed Files:
U branches/krb5-1-9/src/lib/krb5/krb/get_creds.c
Modified: branches/krb5-1-9/src/lib/krb5/krb/get_creds.c
===================================================================
--- branches/krb5-1-9/src/lib/krb5/krb/get_creds.c 2011-12-14 23:32:41 UTC (rev 25586)
+++ branches/krb5-1-9/src/lib/krb5/krb/get_creds.c 2011-12-14 23:50:41 UTC (rev 25587)
@@ -273,6 +273,8 @@
if (!krb5_c_valid_enctype(ctx->cur_tgt->keyblock.enctype))
return KRB5_PROG_ETYPE_NOSUPP;
+ krb5_free_keyblock(context, ctx->subkey);
+ ctx->subkey = NULL;
code = krb5int_make_tgs_request(context, ctx->cur_tgt, ctx->kdcopt,
ctx->cur_tgt->addresses, NULL,
ctx->tgs_in_creds, NULL, NULL, &request,
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5
