diff options
| author | Ken Raeburn <raeburn@mit.edu> | 2008-06-27 03:33:14 +0000 |
|---|---|---|
| committer | Ken Raeburn <raeburn@mit.edu> | 2008-06-27 03:33:14 +0000 |
| commit | 67828247e3af6b7c58ebc7bae9bb3479f2cb86a5 (patch) | |
| tree | b86d5baa8334b6703acf4913f1e18a4ae9a7d5c1 /src/slave | |
| parent | f468121a1abec8c33d38712723f174a73229e68d (diff) | |
use-after-free bugs
Fix some bugs with storage being used immediately after being freed.
None look like anything an attacker can really manipulate AFAICT.
ticket: new
target_version: 1.6.4
tags: pullup
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20485 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src/slave')
| -rw-r--r-- | src/slave/kprop.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/slave/kprop.c b/src/slave/kprop.c index b2ea2c2b3..42bc8fbda 100644 --- a/src/slave/kprop.c +++ b/src/slave/kprop.c @@ -1,7 +1,7 @@ /* * slave/kprop.c * - * Copyright 1990,1991 by the Massachusetts Institute of Technology. + * Copyright 1990,1991,2008 by the Massachusetts Institute of Technology. * All Rights Reserved. * * Export of this software from the United States of America may @@ -505,12 +505,12 @@ open_database(context, data_fn, size) free(data_ok_fn); exit(1); } - free(data_ok_fn); if (stbuf.st_mtime > stbuf_ok.st_mtime) { com_err(progname, 0, "'%s' more recent than '%s'.", data_fn, data_ok_fn); exit(1); } + free(data_ok_fn); *size = stbuf.st_size; return(fd); } |