(mic_des3): make sure message_buffer doesn't point to free()ed memory
on failure. Pointed out by IBM checker. git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@17507 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -172,6 +172,8 @@ mic_des3
|
||||
tmp = malloc (message_buffer->length + 8);
|
||||
if (tmp == NULL) {
|
||||
free (message_token->value);
|
||||
message_token->value = NULL;
|
||||
message_token->length = 0;
|
||||
*minor_status = ENOMEM;
|
||||
return GSS_S_FAILURE;
|
||||
}
|
||||
|
@@ -172,6 +172,8 @@ mic_des3
|
||||
tmp = malloc (message_buffer->length + 8);
|
||||
if (tmp == NULL) {
|
||||
free (message_token->value);
|
||||
message_token->value = NULL;
|
||||
message_token->length = 0;
|
||||
*minor_status = ENOMEM;
|
||||
return GSS_S_FAILURE;
|
||||
}
|
||||
|
Reference in New Issue
Block a user