[krbdev.mit.edu #8696] Resource leak in krb5_425_conv_principal()

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

[krbdev.mit.edu #8696] Resource leak in krb5_425_conv_principal()

Norm Green via RT
Hi Team,

krb5_425_conv_principal() in krb5-1.16.1/src/lib/krb5/krb/conv_princ.c
calls profile_iterator(&iterator, &realm_name, &dummy_value) in a while loop,
later if break this while loop and run into "return retval", then the allocated memory
dummy_value points to will not be freed when leaves this function.

The fix is to call profile_release_string (dummy_value) before "return retval".

Could someone help to take a look?

Thanks,
Bean

_______________________________________________
krb5-bugs mailing list
[hidden email]
https://mailman.mit.edu/mailman/listinfo/krb5-bugs