diff options
| author | Greg Hudson <ghudson@mit.edu> | 2014-03-13 18:34:22 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-03-18 13:01:13 -0400 |
| commit | cc002d6c1ccfc08356d01ba83e72a46855d0302c (patch) | |
| tree | 2394f2f6bf646f84a57ba5997cc3494d08ca3e84 /src/plugins/locate/python/python.exports | |
| parent | cb3db58b1942998a5e2c4d46c21ca0554e769a8c (diff) | |
| download | krb5-cc002d6c1ccfc08356d01ba83e72a46855d0302c.tar.gz krb5-cc002d6c1ccfc08356d01ba83e72a46855d0302c.tar.xz krb5-cc002d6c1ccfc08356d01ba83e72a46855d0302c.zip | |
Fix unlikely double free in PKINIT client code
In pa_pkinit_gen_req, if the cleanup handler is reached with non-zero
retval and non-null out_data, out_data is freed, then dereferenced,
then freed again. This can only happen if one of the small fixed-size
malloc requests fails after pkinit_as_req_create succeeds, so it is
unlikely to occur in practice.
ticket: 7878 (new)
target_version: 1.12.2
tags: pullup
Diffstat (limited to 'src/plugins/locate/python/python.exports')
0 files changed, 0 insertions, 0 deletions