[29362] in CVS-changelog-for-Kerberos-V5
krb5 commit [krb5-1.13]: Fix KDC memory leak on failed S4U2Proxy
daemon@ATHENA.MIT.EDU (Tom Yu)
Wed Apr 6 14:07:18 2016
Date: Wed, 6 Apr 2016 14:07:10 -0400
From: Tom Yu <tlyu@mit.edu>
Message-Id: <201604061807.u36I7As6007808@drugstore.mit.edu>
To: cvs-krb5@mit.edu
Reply-To: krbdev@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: cvs-krb5-bounces@mit.edu
https://github.com/krb5/krb5/commit/c16a6bb0de6b09319d8bb80b04c5bf87b31798f2
commit c16a6bb0de6b09319d8bb80b04c5bf87b31798f2
Author: Greg Hudson <ghudson@mit.edu>
Date: Thu Feb 25 11:27:40 2016 -0500
Fix KDC memory leak on failed S4U2Proxy requests
Make sure to release stkt_server in process_tgs_req() if we fail
before its disposition is determined. Reported by Will Fiveash.
(back ported from commit 194641a8ad7aecc6bc1d4848742c14569f14b900)
ticket: 8363
version_fixed: 1.13.5
status: resolved
tags: -pullup
src/kdc/do_tgs_req.c | 1 +
1 files changed, 1 insertions(+), 0 deletions(-)
diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 48e822b..bb07978 100644
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -849,6 +849,7 @@ cleanup:
kdc_free_rstate(state);
krb5_db_free_principal(kdc_context, server);
krb5_db_free_principal(kdc_context, krbtgt);
+ krb5_db_free_principal(kdc_context, stkt_server);
krb5_db_free_principal(kdc_context, client);
if (session_key.contents != NULL)
krb5_free_keyblock_contents(kdc_context, &session_key);
_______________________________________________
cvs-krb5 mailing list
cvs-krb5@mit.edu
https://mailman.mit.edu/mailman/listinfo/cvs-krb5