]> git.ipfire.org Git - thirdparty/krb5.git/commit
Zap secure cookie contents when freeing
authorGreg Hudson <ghudson@mit.edu>
Wed, 21 Oct 2015 17:21:48 +0000 (13:21 -0400)
committerGreg Hudson <ghudson@mit.edu>
Mon, 26 Oct 2015 21:57:45 +0000 (17:57 -0400)
commit73f0ee229fdd2e888bdefe580bb183d2a6c57365
treea2576c1642f6eefd8b759c372111069230240c68
parentf0c094a1b745d91ef2f9a4eae2149aac026a5789
Zap secure cookie contents when freeing

Secure cookies are intended to hold secret values which may contribute
to key data, and therefore should be sanitized when released.  Also
fix a memory leak in kdc_fast_make_cookie().

ticket: 8271 (new)
target_version: 1.14
tags: pullup
src/include/k5-int.h
src/kdc/fast_util.c
src/lib/krb5/krb/kfree.c
src/lib/krb5/libkrb5.exports