kdc: Fix ENOMEM double-free in IPC CSR authorizer
This commit is contained in:
@@ -611,9 +611,10 @@ authorize(void *ctx,
|
|||||||
hx509_request_authorize_ku(csr, ku);
|
hx509_request_authorize_ku(csr, ku);
|
||||||
|
|
||||||
if (do_check) {
|
if (do_check) {
|
||||||
if ((s = rk_strpoolcollect(cmd)) == NULL)
|
s = rk_strpoolcollect(cmd);
|
||||||
goto enomem;
|
|
||||||
cmd = NULL;
|
cmd = NULL;
|
||||||
|
if (s == NULL)
|
||||||
|
goto enomem;
|
||||||
if ((ret = call_svc(context, ipc, csr, s, piecemeal_check_ok)))
|
if ((ret = call_svc(context, ipc, csr, s, piecemeal_check_ok)))
|
||||||
goto out;
|
goto out;
|
||||||
} /* else there was nothing to check -> permit */
|
} /* else there was nothing to check -> permit */
|
||||||
|
Reference in New Issue
Block a user