]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix unlikely leak in KDC AS-REQ error path
authorGreg Hudson <ghudson@mit.edu>
Thu, 22 Sep 2016 06:21:39 +0000 (02:21 -0400)
committerTom Yu <tlyu@mit.edu>
Mon, 24 Oct 2016 19:38:13 +0000 (15:38 -0400)
commitb5cd94af456bd62a0f71c5bf88dd6a74b5671653
treef7b00ac5e0f336aaab2cfe326c2ed90b0c554b47
parent0d05aa2ddf61eb03ddb647477d39a2bd1ccc9254
Fix unlikely leak in KDC AS-REQ error path

In prepare_error_as(), if krb5_us_timeofday() fails and error pa-data
was supplied, the FAST cookie and a shallow copy of the error padata
can be leaked.  Reported by Will Fiveash.

(cherry picked from commit 8d852c577039d59e1bea383e4ddfe575c20f240d)

ticket: 8498
version_fixed: 1.14.5
src/kdc/do_as_req.c