Fix KDC memory leak on failed S4U2Proxy requests

Make sure to release stkt_server in process_tgs_req() if we fail
before its disposition is determined.  Reported by Will Fiveash.

(back ported from commit 194641a8ad7aecc6bc1d4848742c14569f14b900)

ticket: 8363
version_fixed: 1.13.5
status: resolved
tags: -pullup

diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 48e822b10307f0d89c3482329130eaa97ec6bb00..bb0797887b5d1c63a3092196ca62b6bfa0a8e566 100644 (file)
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -849,6 +849,7 @@ cleanup:
         kdc_free_rstate(state);
     krb5_db_free_principal(kdc_context, server);
     krb5_db_free_principal(kdc_context, krbtgt);
+    krb5_db_free_principal(kdc_context, stkt_server);
     krb5_db_free_principal(kdc_context, client);
     if (session_key.contents != NULL)
         krb5_free_keyblock_contents(kdc_context, &session_key);