]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix uncommon PKINIT memory leak
authorsashan <anedvedicky@gmail.com>
Sun, 29 May 2022 08:32:57 +0000 (10:32 +0200)
committerGreg Hudson <ghudson@mit.edu>
Sat, 5 Nov 2022 19:57:07 +0000 (15:57 -0400)
commit441736872285e6538e6b6c78eab60862d3b6dcaa
treee248d0adfe5805cee5d2f366d1f286a8b50935b5
parentd97a080e9c4ca380ca640f28f3b3aff06cd03ea5
Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata().  In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

(cherry picked from commit 883415036a4b4e0372b84a5a6e46c10b3a67aba0)

ticket: 9065
version_fixed: 1.19.4
src/plugins/preauth/pkinit/pkinit_srv.c