diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2008-06-27 03:33:14 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2008-06-27 03:33:14 +0000 |
| commit | 67828247e3af6b7c58ebc7bae9bb3479f2cb86a5 (patch) | |
| tree | b86d5baa8334b6703acf4913f1e18a4ae9a7d5c1 /src/kdc | |
| parent | f468121a1abec8c33d38712723f174a73229e68d (diff) | |
use-after-free bugs
Fix some bugs with storage being used immediately after being freed.
None look like anything an attacker can really manipulate AFAICT.
ticket: new
target_version: 1.6.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20485 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/kdc')
| -rw-r--r-- | src/kdc/network.c | 2 |
1 files changed, 0 insertions, 2 deletions
diff --git a/src/kdc/network.c b/src/kdc/network.c index 82b1c7768..1072fce3d 100644 --- a/src/kdc/network.c +++ b/src/kdc/network.c @@ -1086,10 +1086,8 @@ static void process_packet(struct connection *conn, const char *prog, return; } if (cc != response->length) { - krb5_free_data(kdc_context, response); com_err(prog, 0, "short reply write %d vs %d\n", response->length, cc); - return; } krb5_free_data(kdc_context, response); return; |