7668599d1d
when v4 compatibility is enabled on the KDC (CVE-2008-0062,
CVE-2008-0063, #432620, #432621)
- add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
high-numbered descriptors are used (CVE-2008-0947, #433596)
- add backport bug fix for an attempt to free non-heap memory in
libgssapi_krb5 (CVE-2007-5901, #415321)
- add backport bug fix for a double-free in out-of-memory situations in
libgssapi_krb5 (CVE-2007-5971, #415351)
14 lines
517 B
Diff
14 lines
517 B
Diff
Patch for CVE-2007-5901, pulled from SVN per #415321.
|
|
diff -up src/lib/gssapi/mechglue/g_initialize.c src/lib/gssapi/mechglue/g_initialize.c
|
|
--- src/lib/gssapi/mechglue/g_initialize.c 2008-03-04 16:29:13.000000000 -0500
|
|
+++ src/lib/gssapi/mechglue/g_initialize.c 2008-03-04 16:29:16.000000000 -0500
|
|
@@ -210,7 +210,7 @@ gss_OID_set *mechSet;
|
|
free((*mechSet)->elements[j].elements);
|
|
}
|
|
free((*mechSet)->elements);
|
|
- free(mechSet);
|
|
+ free(*mechSet);
|
|
*mechSet = NULL;
|
|
return (GSS_S_FAILURE);
|
|
}
|