]> git.ipfire.org Git - thirdparty/krb5.git/commit
Fix leak in gss_display_name() for non-MN names
authorGreg Hudson <ghudson@mit.edu>
Tue, 28 Jun 2016 16:28:11 +0000 (12:28 -0400)
committerGreg Hudson <ghudson@mit.edu>
Wed, 10 Aug 2016 17:36:53 +0000 (13:36 -0400)
commit20fcbf2cb820df0d31e66bb11f64fb50a31008f5
tree2d154e11cf522f68efcd84c798a9b71e26d630e4
parentd9d6e7e9aa619d5bd35fa6e4468683ee7ddb5e5d
Fix leak in gss_display_name() for non-MN names

RFC 2744 states that the gss_display_name() output_name_type result is
"a pointer into static storage, and should be treated as read-only by
the caller (in particular, the application should not attempt to free
it)".  For non-mechanism names, we were making a copy of the name type
from the union name structure, causing a memory leak; stop doing that.

ticket: 8439 (new)
target_version: 1.14-next
target_version: 1.13-next
tags: pullup
src/lib/gssapi/mechglue/g_dsp_name.c