oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

use after free [CID-184] [CID-185]

Browse Source
This commit is contained in:
Love Hornquist Astrand
2009-07-30 07:38:24 +02:00
parent 9581e59bde
commit a1964f4747
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
lib/krb5/scache.c
View File

@@ -506,11 +506,11 @@ scc_resolve(krb5_context context, krb5_ccache *id, const char *res)
if (sqlite3_column_type(s->scache_name, 0) != SQLITE_INTEGER) { if (sqlite3_column_type(s->scache_name, 0) != SQLITE_INTEGER) {
sqlite3_reset(s->scache_name); sqlite3_reset(s->scache_name);
scc_free(s);
krb5_set_error_message(context, KRB5_CC_END, krb5_set_error_message(context, KRB5_CC_END,
N_("Cache name of wrong type " N_("Cache name of wrong type "
"for scache %ld", ""), "for scache %ld", ""),
(unsigned long)s->name); (unsigned long)s->name);
scc_free(s);
return KRB5_CC_END; return KRB5_CC_END;
} }
@@ -1334,9 +1334,8 @@ scc_move(krb5_context context, krb5_ccache from, krb5_ccache to)
return 0; return 0;
rollback: rollback:
scc_free(sfrom);
exec_stmt(context, sfrom->db, "ROLLBACK", 0); exec_stmt(context, sfrom->db, "ROLLBACK", 0);
scc_free(sfrom);
return KRB5_CC_IO; return KRB5_CC_IO;
} }