[16059] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

[krbdev.mit.edu #8700] Resource leak in

daemon@ATHENA.MIT.EDU (Bean Zhang via RT)
Tue Jun 19 11:26:29 2018

Mail-followup-to: rt@krbdev.mit.edu
mail-copies-to: never
From: "Bean Zhang via RT" <rt-comment@KRBDEV-PROD-APP-1.mit.edu>
In-Reply-To: <rt-8700@krbdev.mit.edu>
Message-ID: <rt-8700-48658.18.628260609778@krbdev.mit.edu>
To: "'AdminCc of krbdev.mit.edu Ticket #8700'":;
Date: Tue, 19 Jun 2018 11:26:24 -0400 (EDT)
Reply-To: rt-comment@KRBDEV-PROD-APP-1.mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: krb5-bugs-bounces@mit.edu

Hi Team,

In krb5int_get_fq_local_hostname() of krb5-1.16.1/src/lib/krb5/os/hostrealm.c,
When calls getaddrinfo(), will store the allocated memory to ai,
later if strlcpy() fails, this function returns without freeing the memory that ai points to.

The fix is to call "freeaddrinfo(ai)" if this function returns on calling strlcpy() failure.

Could someone help to take a look?

Thanks,
Bean

_______________________________________________
krb5-bugs mailing list
krb5-bugs@mit.edu
https://mailman.mit.edu/mailman/listinfo/krb5-bugs

home help back first fref pref prev next nref lref last post