From: Greg Hudson <ghudson@mit.edu>
Date: Wed, 6 Jun 2012 23:13:13 +0000 (-0400)
Subject: Don't free caller's principal in vfy_increds
X-Git-Tag: krb5-1.11-alpha1~511
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=dd64191e02df0a13b29345e4c50fe03e039dc207;p=thirdparty%2Fkrb5.git

Don't free caller's principal in vfy_increds

#7125 took out the copy of the krb5_verify_init_creds server argument
but left in the corresponding free, so it was freeing a caller-owned
principal.  Reported by Russ Allbery.

ticket: 7162
---

diff --git a/src/lib/krb5/krb/vfy_increds.c b/src/lib/krb5/krb/vfy_increds.c
index 5fca70025c..14acb0a444 100644
--- a/src/lib/krb5/krb/vfy_increds.c
+++ b/src/lib/krb5/krb/vfy_increds.c
@@ -317,7 +317,6 @@ cleanup:
 
     if (defkeytab != NULL)
         krb5_kt_close(context, defkeytab);
-    krb5_free_principal(context, server);
     free_princ_list(context, host_princs);
 
     return ret;