7668599d1d
when v4 compatibility is enabled on the KDC (CVE-2008-0062,
CVE-2008-0063, #432620, #432621)
- add fixes from MITKRB5-SA-2008-002 for array out-of-bounds accesses when
high-numbered descriptors are used (CVE-2008-0947, #433596)
- add backport bug fix for an attempt to free non-heap memory in
libgssapi_krb5 (CVE-2007-5901, #415321)
- add backport bug fix for a double-free in out-of-memory situations in
libgssapi_krb5 (CVE-2007-5971, #415351)
13 lines
465 B
Diff
13 lines
465 B
Diff
Patch for CVE-2007-5971, pulled from SVN per #415351.
|
|
diff -up src/lib/gssapi/krb5/k5sealv3.c src/lib/gssapi/krb5/k5sealv3.c
|
|
--- src/lib/gssapi/krb5/k5sealv3.c 2008-03-04 16:22:29.000000000 -0500
|
|
+++ src/lib/gssapi/krb5/k5sealv3.c 2008-03-04 16:22:22.000000000 -0500
|
|
@@ -248,7 +248,6 @@ gss_krb5int_make_seal_token_v3 (krb5_con
|
|
plain.data = 0;
|
|
if (err) {
|
|
zap(outbuf,bufsize);
|
|
- free(outbuf);
|
|
goto error;
|
|
}
|
|
if (sum.length != ctx->cksum_size)
|