[714] in Kerberos-V5-bugs

home help back first fref pref prev next nref lref last post

Re: Help for expunging replay cache

daemon@ATHENA.MIT.EDU (Theodore Ts'o)
Wed Sep 7 21:23:21 1994

Date: Wed, 7 Sep 1994 21:23:13 +0500
From: Theodore Ts'o <tytso@MIT.EDU>
To: Byron Martin <bmartin@ctycal.cuug.ab.ca>
Cc: krb5-bugs@MIT.EDU
In-Reply-To: [713]

There's a bug in src/lib/krb5/rcache/rc_dfl.c that will be fixed in the
next release; it's a problem with some allocated memory being used after
it is freed, which is wrong but manages to work on some architectures.
Here's the modified code, starting at about line 540 of rc_dfl.c:

    struct authlist *q;
    char *name;
    krb5_error_code retval;
    krb5_rcache tmp;
    krb5_deltat lifespan = t->lifespan;  /* save original lifespan */

    name = t->name;
    t->name = 0;		/* Clear name so it isn't freed */
    (void) krb5_rc_dfl_close_no_free(id);
    retval = krb5_rc_dfl_resolve(id, name);
    free(name);
    if (retval)
	return retval;
    retval = krb5_rc_dfl_recover(id);

						- Ted


home help back first fref pref prev next nref lref last post