oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kdc: zero KDCFastState padata before free

Browse Source
This commit is contained in:
Luke Howard
2021-08-04 17:41:01 +10:00
parent 04e3ea4307
commit 3604497fda
2 changed files with 16 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
kdc/fast.c
View File

@@ -560,3 +560,18 @@ _kdc_fast_unwrap_request(astgs_request_t r)
return ret;
}
void
_kdc_free_fast_state(KDCFastState *state)
{
size_t i;
for (i = 0; i < state->fast_state.len; i++) {
PA_DATA *pa = &state->fast_state.val[i];
if (pa->padata_value.data)
memset_s(pa->padata_value.data, 0,
pa->padata_value.length, pa->padata_value.length);
}
free_KDCFastState(state);
}

2
kdc/kerberos5.c
View File

@@ -2505,7 +2505,7 @@ out:
free_EncTicketPart(&r->et);
free_EncKDCRepPart(&r->ek);
free_KDCFastState(&r->fast);
_kdc_free_fast_state(&r->fast);
if (error_method.len)
free_METHOD_DATA(&error_method);