[tools] Cleanup RpcOut reply after send failure

There is a path in RpcOut that does not clear the reply message
after a failure.  This can cause the invoker to trigger a free()
failure.

diff --git a/open-vm-tools/lib/rpcOut/rpcout.c b/open-vm-tools/lib/rpcOut/rpcout.c
index a59ce66cd95a5c0b1cd4cea134e1fa52b8525159..b98dc92ba259bd9d1b6ba3e2b02d56fa6e622c9b 100644 (file)
--- a/open-vm-tools/lib/rpcOut/rpcout.c
+++ b/open-vm-tools/lib/rpcOut/rpcout.c
@@ -439,7 +439,9 @@ RpcOutSendOneRawWork(void *request,         // IN: RPCI command
          memcpy(callerReply, myReply, s);
          callerReply[s] = '\0';
       }
-
+      if (reply != NULL) {
+         *reply = NULL;
+      }
       return FALSE;
    }