summaryrefslogtreecommitdiffstats
path: root/source3/auth
diff options
context:
space:
mode:
authorStefan Metzmacher <metze@samba.org>2013-11-05 14:04:20 +0100
committerStefan Metzmacher <metze@samba.org>2014-03-13 10:21:47 +0100
commit76e5ea3a2c5f49cfc1026bd7c6b8baddb1e7dc16 (patch)
treec7be5b62aac01c69139f9fccff372026d9d0072a /source3/auth
parent824add8aaffca4adfec652fb1f6565d038387f9d (diff)
downloadsamba-76e5ea3a2c5f49cfc1026bd7c6b8baddb1e7dc16.tar.gz
samba-76e5ea3a2c5f49cfc1026bd7c6b8baddb1e7dc16.tar.xz
samba-76e5ea3a2c5f49cfc1026bd7c6b8baddb1e7dc16.zip
CVE-2013-4496:s3:auth: fix memory leak in the ACCOUNT_LOCKED_OUT case.
Bug: https://bugzilla.samba.org/show_bug.cgi?id=10245 Change-Id: Iabf22753effd80086d7956619a3dae830e487da8 Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Jeremy Allison <jra@samba.org> Signed-off-by: Andrew Bartlett <abartlet@samba.org> Reviewed-on: https://gerrit.samba.org/161
Diffstat (limited to 'source3/auth')
-rw-r--r--source3/auth/check_samsec.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/source3/auth/check_samsec.c b/source3/auth/check_samsec.c
index b6cac60dd3..7c97170328 100644
--- a/source3/auth/check_samsec.c
+++ b/source3/auth/check_samsec.c
@@ -408,6 +408,7 @@ NTSTATUS check_sam_security(const DATA_BLOB *challenge,
/* Quit if the account was locked out. */
if (pdb_get_acct_ctrl(sampass) & ACB_AUTOLOCK) {
DEBUG(3,("check_sam_security: Account for user %s was locked out.\n", username));
+ TALLOC_FREE(sampass);
return NT_STATUS_ACCOUNT_LOCKED_OUT;
}