]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix uncommon PKINIT memory leak
authorsashan <anedvedicky@gmail.com>
Sun, 29 May 2022 08:32:57 +0000 (10:32 +0200)
committerGreg Hudson <ghudson@mit.edu>
Fri, 4 Nov 2022 16:28:40 +0000 (12:28 -0400)
commit440c974aee745cd435d5cecc8976d7679ae1f7a6
tree49efdda7d6313104758a78fda48f2fa4fcc50165
parent782e3cf8e909ff7ad62c3b49e18aaad3e9c65279
Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata().  In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

(cherry picked from commit 883415036a4b4e0372b84a5a6e46c10b3a67aba0)

ticket: 9065
version_fixed: 1.20.1
src/plugins/preauth/pkinit/pkinit_srv.c