2eb0567065
- pull in multiple changes to allow replay caches to be added to a GSS credential store as "rcache"-type credentials (RT#7818/#7819/#7836, #1056078/#1056080)
27 lines
928 B
Diff
27 lines
928 B
Diff
commit 9df0c4bdce6b88a01af51e4bbb9a365db00256d5
|
|
Author: Greg Hudson <ghudson@mit.edu>
|
|
Date: Wed Jan 15 14:41:54 2014 -0500
|
|
|
|
Clean up rcache if GSS krb5 acquire_cred fails
|
|
|
|
The error handler in acquire_cred_context didn't release the rcache,
|
|
which would cause it to leak if we failed after acquire_accept_cred.
|
|
|
|
ticket: 7818 (new)
|
|
target_version: 1.12.2
|
|
tags: pullup
|
|
|
|
diff --git a/src/lib/gssapi/krb5/acquire_cred.c b/src/lib/gssapi/krb5/acquire_cred.c
|
|
index 37cc6b5..f625c0c 100644
|
|
--- a/src/lib/gssapi/krb5/acquire_cred.c
|
|
+++ b/src/lib/gssapi/krb5/acquire_cred.c
|
|
@@ -829,6 +829,8 @@ error_out:
|
|
if (cred->keytab)
|
|
krb5_kt_close(context, cred->keytab);
|
|
#endif /* LEAN_CLIENT */
|
|
+ if (cred->rcache)
|
|
+ krb5_rc_close(context, cred->rcache);
|
|
if (cred->name)
|
|
kg_release_name(context, &cred->name);
|
|
k5_mutex_destroy(&cred->lock);
|