diff options
| author | Tom Yu <tlyu@mit.edu> | 2007-12-14 04:38:28 +0000 |
|---|---|---|
| committer | Tom Yu <tlyu@mit.edu> | 2007-12-14 04:38:28 +0000 |
| commit | 39a6cc6679e381f890144eac4da2c30bfd8baa2a (patch) | |
| tree | 16b0cb0248304a9a194a4996a274594c1e25ddec /src | |
| parent | e0994f8f36e2d9f4d080cf265ebcb67a337007ba (diff) | |
| download | krb5-39a6cc6679e381f890144eac4da2c30bfd8baa2a.tar.gz krb5-39a6cc6679e381f890144eac4da2c30bfd8baa2a.tar.xz krb5-39a6cc6679e381f890144eac4da2c30bfd8baa2a.zip | |
fix CVE-2007-5971: free of non-heap pointer in gss_indicate_mechs()
ticket: 5856
tags: pullup
target_version: 1.6.4
git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@20178 dc483132-0cff-0310-8789-dd5450dbe970
Diffstat (limited to 'src')
| -rw-r--r-- | src/lib/gssapi/mechglue/g_initialize.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/lib/gssapi/mechglue/g_initialize.c b/src/lib/gssapi/mechglue/g_initialize.c index e25b1faf0..d47499caf 100644 --- a/src/lib/gssapi/mechglue/g_initialize.c +++ b/src/lib/gssapi/mechglue/g_initialize.c @@ -213,7 +213,7 @@ gss_OID_set *mechSet; free((*mechSet)->elements[j].elements); } free((*mechSet)->elements); - free(mechSet); + free(*mechSet); *mechSet = NULL; return (GSS_S_FAILURE); } |