From: Greg Hudson <ghudson@mit.edu>
Date: Fri, 19 Jun 2015 21:16:52 +0000 (-0400)
Subject: Fix leak in gss_acquire_cred_with_password
X-Git-Tag: krb5-1.14-alpha1~85
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=refs%2Fpull%2F286%2Fhead;p=thirdparty%2Fkrb5.git

Fix leak in gss_acquire_cred_with_password

The target_mechs array needs to be freed on successful return.

ticket: 8204 (new)
target_version: 1.13.3
tags: pullup
---

diff --git a/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c b/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
index f290f8a560..7835d59726 100644
--- a/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
+++ b/src/lib/gssapi/mechglue/g_acquire_cred_with_pw.c
@@ -496,6 +496,9 @@ gss_add_cred_with_password(minor_status, input_cred_handle,
 					    selected_mech,
 					   &allocated_name);
 
+    if (target_mechs)
+	(void)gss_release_oid_set(&temp_minor_status, &target_mechs);
+
     return (GSS_S_COMPLETE);
 
 errout: