diff options
author | Simo Sorce <simo@redhat.com> | 2012-08-14 15:14:15 +0200 |
---|---|---|
committer | Greg Hudson <ghudson@mit.edu> | 2012-09-16 11:08:58 -0400 |
commit | 56feee187579905c9101b0cdbdd8c6a850adcfc9 (patch) | |
tree | 0c99a9825ad6fa9fc23a86786631a2ca0a485521 /src/tests/gssapi/t_gssapi.py | |
parent | 6d9a424a12cc23da9f4b3dc71502f9ad917bc1fd (diff) | |
download | krb5-56feee187579905c9101b0cdbdd8c6a850adcfc9.tar.gz krb5-56feee187579905c9101b0cdbdd8c6a850adcfc9.tar.xz krb5-56feee187579905c9101b0cdbdd8c6a850adcfc9.zip |
Avoid leaks on gss_accept_sec_context errors
Failure handling during the postprocessing of
mech->gss_accept_sec_context was inconsistent. In one case we delete
the output token but leave the partly-constructed context present in
*context_handle (violating RFC 2744 if this is the first call); in
other cases we leave the output token in the caller's buffer but do
destroy the partly-constructed context. Make this more consistent by
always destroying the output token and partly-constructed context.
(RFC 2744 prefers, but does not require, leaving the
partly-constructed context present on error if it was present on
entry. At the moment we are ignoring that preference.)
[ghudson@mit.edu: Rewrote commit message with more details]
Diffstat (limited to 'src/tests/gssapi/t_gssapi.py')
0 files changed, 0 insertions, 0 deletions