From: Greg Hudson <ghudson@mit.edu>
Date: Wed, 29 Jun 2016 04:01:04 +0000 (-0400)
Subject: Fix leak in capaths processing
X-Git-Tag: krb5-1.14.4-final~25
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=1cd322e9b6927a0eb2e102c4501eef0c94c4102f;p=thirdparty%2Fkrb5.git

Fix leak in capaths processing

In k5_client_realm_path(), free the list of strings returned by
rtree_capaths_vals().

(cherry picked from commit 08756ce56bddab79afa4ee24b80243d8f822559d)

ticket: 8447
version_fixed: 1.14.4
---

diff --git a/src/lib/krb5/krb/walk_rtree.c b/src/lib/krb5/krb/walk_rtree.c
index 2b966287c4..0566a55f1f 100644
--- a/src/lib/krb5/krb/walk_rtree.c
+++ b/src/lib/krb5/krb/walk_rtree.c
@@ -125,7 +125,7 @@ k5_client_realm_path(krb5_context context, const krb5_data *client,
                      const krb5_data *server, krb5_data **rpath_out)
 {
     krb5_error_code retval;
-    char **capvals;
+    char **capvals = NULL;
     size_t i;
     krb5_data *rpath = NULL, d;
 
@@ -160,6 +160,7 @@ k5_client_realm_path(krb5_context context, const krb5_data *client,
     rpath = NULL;
 
 cleanup:
+    profile_free_list(capvals);
     krb5int_free_data_list(context, rpath);
     return retval;
 }