From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 19 Jun 2015 21:16:52 +0000 (-0400)
Subject: Fix leak in gss_acquire_cred_with_password
X-Git-Tag: krb5-1.12.5-final~27
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=30e9f9c3820a3d368fbe45c93abfc1cef7d60f4d;p=thirdparty%2Fkrb5.git

Fix leak in gss_acquire_cred_with_password

The target_mechs array needs to be freed on successful return.

(cherry picked from commit 02a85d73c4548d27dcbc1c1681b4bf1370b03632)

ticket: 8304 (new)
version_fixed: 1.12.5
status: resolved
---

diff --git a/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c b/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
index f290f8a560..7835d59726 100644
--- a/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
+++ b/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
@@ -496,6 +496,9 @@ gss_add_cred_with_password(minor_status, input_cred_handle,
 					    selected_mech,
 					   &allocated_name);
 
+    if (target_mechs)
+	(void)gss_release_oid_set(&temp_minor_status, &target_mechs);
+
     return (GSS_S_COMPLETE);
 
 errout: