[11631] in Kerberos-V5-bugs
[krbdev.mit.edu #6752] CloseHandle() calls in cc_mslsa.c should be
daemon@ATHENA.MIT.EDU (Jamie Kirkpatrick via RT)
Mon Jul 19 17:47:12 2010
Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Jamie Kirkpatrick via RT" <rt-comment@krbdev.MIT.EDU>
In-Reply-To: <rt-6752@krbdev.mit.edu>
Message-ID: <rt-6752-33033.18.823950532908@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #6752'":;"'AdminCc of krbdev.mit.edu Ticket #6752'":;@MIT.EDU
Date: Mon, 19 Jul 2010 17:47:10 -0400 (EDT)
Reply-To: rt-comment@krbdev.MIT.EDU
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu
I've just tracked down a crasher in cc_msla.c: the code calls
LsaConnectUntrusted() to obtain a connection to the LSA server which returns
a HANDLE instance. Unfortunately, the wrong routine is used to free this
handle after it has been used: see here -
http://msdn.microsoft.com/en-us/library/aa378265(v=VS.85).aspx.
Need to replace calls to CloseHandle() with calls
to LsaDeregisterLogonProcess() to fix the issue.
--
Jamie Kirkpatrick
07818 422311
_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs
