* acquire_cred.c (krb5_gss_acquire_cred): Create and destroy a local krb5

context.
* add_cred.c (krb5_gss_add_cred): Likewise.
* compare_name.c (krb5_gss_compare_name): Likewise.
* copy_ccache.c (gss_krb5_copy_ccache): Likewise.
* disp_name.c (krb5_gss_display_name): Likewise.
* duplicate_name.c (krb5_gss_duplicate_name): Likewise.
* inq_cred.c (krb5_gss_inquire_cred): Likewise.

* context_time.c (krb5_gss_context_time): Use the krb5 context in the GSS
security context.

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@16187 dc483132-0cff-0310-8789-dd5450dbe970

1 files changed, 12 insertions, 3 deletions

diff --git a/src/lib/gssapi/krb5/inq_cred.c b/src/lib/gssapi/krb5/inq_cred.c
index 14ec0daa10..b0a426aa54 100644
--- a/src/lib/gssapi/krb5/inq_cred.c
+++ b/src/lib/gssapi/krb5/inq_cred.c
@@ -93,8 +93,11 @@ krb5_gss_inquire_cred(minor_status, cred_handle, name, lifetime_ret,
 
    ret = GSS_S_FAILURE;
 
-   if (GSS_ERROR(kg_get_context(minor_status, &context)))
-      return(GSS_S_FAILURE);
+   code = krb5_init_context(&context);
+   if (code) {
+       *minor_status = code;
+       return GSS_S_FAILURE;
+   }
 
    if (name) *name = NULL;
    if (mechanisms) *mechanisms = NULL;
@@ -106,14 +109,17 @@ krb5_gss_inquire_cred(minor_status, cred_handle, name, lifetime_ret,
 
       if ((major = kg_get_defcred(minor_status, (gss_cred_id_t)&cred)) &&
 	  GSS_ERROR(major)) {
+	 krb5_free_context(context);
 	 return(major);
       }
    } else {
       OM_uint32 major;
 	   
       major = krb5_gss_validate_cred(minor_status, cred_handle);
-      if (GSS_ERROR(major))
+      if (GSS_ERROR(major)) {
+	  krb5_free_context(context);
 	  return(major);
+      }
       cred = (krb5_gss_cred_id_t) cred_handle;
    }
 
@@ -161,6 +167,7 @@ krb5_gss_inquire_cred(minor_status, cred_handle, name, lifetime_ret,
 	 (void) gss_release_oid_set(minor_status, &mechs);
 	 krb5_free_principal(context, ret_name);
 	 *minor_status = (OM_uint32) G_VALIDATE_FAILED;
+	 krb5_free_context(context);
 	 return(GSS_S_FAILURE);
       }
       *name = (gss_name_t) ret_name;
@@ -178,6 +185,7 @@ krb5_gss_inquire_cred(minor_status, cred_handle, name, lifetime_ret,
    if (cred_handle == GSS_C_NO_CREDENTIAL)
        krb5_gss_release_cred(minor_status, (gss_cred_id_t)cred);
 
+   krb5_free_context(context);
    *minor_status = 0;
    return((lifetime == 0)?GSS_S_CREDENTIALS_EXPIRED:GSS_S_COMPLETE);
 fail:
@@ -186,6 +194,7 @@ fail:
 
        krb5_gss_release_cred(&tmp_min_stat, (gss_cred_id_t)cred);
    }
+   krb5_free_context(context);
    return ret;
 }