From 6e8ab0c204fc8973cd8c801c31e91c455ed6b65e Mon Sep 17 00:00:00 2001 From: Jeffrey Altman Date: Sun, 16 Jan 2022 23:04:54 -0500 Subject: [PATCH] lib/gssapi/spnego: _gss_negoex_accept do not leak error message Change-Id: I464b3c5e5b96b36da2cda71b1dacc8ad971fda35 --- lib/gssapi/spnego/negoex_ctx.c | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/lib/gssapi/spnego/negoex_ctx.c b/lib/gssapi/spnego/negoex_ctx.c index fd337eee2..4b42fc754 100644 --- a/lib/gssapi/spnego/negoex_ctx.c +++ b/lib/gssapi/spnego/negoex_ctx.c @@ -1024,12 +1024,14 @@ cleanup: if (GSS_ERROR(major)) { if (!mech_error) { - krb5_context context = _gss_mg_krb5_context(); + krb5_context context = _gss_mg_krb5_context(); + char *emsg = krb5_get_error_message(context, *minor); - gss_mg_set_error_string(GSS_SPNEGO_MECHANISM, - major, *minor, - "NegoEx failed to accept security context: %s", - krb5_get_error_message(context, *minor)); + gss_mg_set_error_string(GSS_SPNEGO_MECHANISM, + major, *minor, + "NegoEx failed to accept security context: %s", + emsg); + krb5_free_error_message(context, emsg); } _gss_negoex_release_context(ctx);