From: Ken Raeburn <raeburn@mit.edu>
Date: Tue, 9 May 2006 19:36:46 +0000 (+0000)
Subject: * send_tgs.c (krb5_send_tgs): Fix memory allocation size when padata is
X-Git-Tag: krb5-1.5-alpha1~35
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=94ca17210b10a0c0cc67bf9449d4f962bebd5cfb;p=thirdparty%2Fkrb5.git

* send_tgs.c (krb5_send_tgs): Fix memory allocation size when padata is
provided.

ticket: 3714

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17988 dc483132-0cff-0310-8789-dd5450dbe970
---

diff --git a/src/lib/krb5/krb/send_tgs.c b/src/lib/krb5/krb/send_tgs.c
index 8fc60212ce..aa881e16f0 100644
--- a/src/lib/krb5/krb/send_tgs.c
+++ b/src/lib/krb5/krb/send_tgs.c
@@ -228,7 +228,7 @@ krb5_send_tgs(krb5_context context, krb5_flags kdcoptions,
 	krb5_pa_data * const * counter;
 	register unsigned int i = 0;
 	for (counter = padata; *counter; counter++, i++);
-	combined_padata = (krb5_pa_data **)malloc(i+2);
+	combined_padata = malloc((i+2) * sizeof(*combined_padata));
 	if (!combined_padata) {
 	    krb5_xfree(ap_req_padata.contents);
 	    retval = ENOMEM;