]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix uncommon PKINIT memory leak 1253/head
authorsashan <anedvedicky@gmail.com>
Sun, 29 May 2022 08:32:57 +0000 (10:32 +0200)
committerGreg Hudson <ghudson@mit.edu>
Wed, 8 Jun 2022 22:29:05 +0000 (18:29 -0400)
commit883415036a4b4e0372b84a5a6e46c10b3a67aba0
tree079c741959dcc19fa4d5860d2e9a486e4da993f8
parentf8ecc0ae74c7ebd84f042e28079aa6b4b2ae405c
Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata().  In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

ticket: 9065 (new)
tags: pullup
target_version: 1.20-next
target_version: 1.19-next
src/plugins/preauth/pkinit/pkinit_srv.c