plug some memory leaks

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@1734 dc483132-0cff-0310-8789-dd5450dbe970

2 files changed, 13 insertions, 0 deletions

diff --git a/src/kdc/do_as_req.c b/src/kdc/do_as_req.c
index 7215c35595..a5d59b4281 100644
--- a/src/kdc/do_as_req.c
+++ b/src/kdc/do_as_req.c
@@ -358,6 +358,11 @@ krb5_data **response;			/* filled in with a response packet */
     memset((char *)encrypting_key.contents, 0, encrypting_key.length);
     xfree(encrypting_key.contents);
     cleanup();
+    /* these parts are left on as a courtesy from krb5_encode_kdc_rep so we
+       can use them in raw form if needed.  But, we don't... */
+    memset(reply.enc_part.ciphertext.data, 0,
+	   reply.enc_part.ciphertext.length);
+    free(reply.enc_part.ciphertext.data);
     return retval;
 }
 
diff --git a/src/kdc/do_tgs_req.c b/src/kdc/do_tgs_req.c
index 57e7909038..66d3b91fca 100644
--- a/src/kdc/do_tgs_req.c
+++ b/src/kdc/do_tgs_req.c
@@ -528,6 +528,14 @@ tgt_again:
     xfree(session_key->contents);
     tkt_cleanup();
     session_key->contents = 0;
+    memset(ticket_reply.enc_part.ciphertext.data, 0,
+	   ticket_reply.enc_part.ciphertext.length);
+    free(ticket_reply.enc_part.ciphertext.data);
+    /* these parts are left on as a courtesy from krb5_encode_kdc_rep so we
+       can use them in raw form if needed.  But, we don't... */
+    memset(reply.enc_part.ciphertext.data, 0,
+	   reply.enc_part.ciphertext.length);
+    free(reply.enc_part.ciphertext.data);
     return retval;
 }