diff options
| author | Greg Hudson <ghudson@mit.edu> | 2014-03-14 12:53:50 -0400 |
|---|---|---|
| committer | Greg Hudson <ghudson@mit.edu> | 2014-03-18 13:01:13 -0400 |
| commit | 3c14324baffdc1848f75924deaf69e43f30e6621 (patch) | |
| tree | 2662fe7fe178cf1b3b931b6b536541804688b7ff /src/plugins/locate/python | |
| parent | cc002d6c1ccfc08356d01ba83e72a46855d0302c (diff) | |
| download | krb5-3c14324baffdc1848f75924deaf69e43f30e6621.tar.gz krb5-3c14324baffdc1848f75924deaf69e43f30e6621.tar.xz krb5-3c14324baffdc1848f75924deaf69e43f30e6621.zip | |
Improve PKINIT client memory management
In pkinit_as_req_create, create and encode stack-allocated auth-pack
structures containing only alias pointers, instead of heap-allocated
structures containing a mix of alias pointers, owner pointers, and
appropriated caller memory. Keep everything we temporarily allocate
in separate local variables and free them through those variables.
In pa_pkinit_gen_req, use safer memory practices to avoid problems
like issue #7878. Free the checksum since pkinit_as_req_create no
longer takes ownership it. Remove a broken overly defensive check
after calling pkinit_as_req_create.
Remove init_krb5_auth_pack and init_krb5_auth_pack_draft9 as they are
no longer required.
Diffstat (limited to 'src/plugins/locate/python')
0 files changed, 0 insertions, 0 deletions
