don't free encrypted padata until we're really done with it
git-svn-id: svn://svn.h5l.se/heimdal/trunk/heimdal@10980 ec53bebd-3082-4978-b11e-865c3cabbd6b
This commit is contained in:
@@ -590,17 +590,18 @@ as_rep(KDC_REQ *req,
|
|||||||
&enc_data,
|
&enc_data,
|
||||||
&ts_data);
|
&ts_data);
|
||||||
krb5_crypto_destroy(context, crypto);
|
krb5_crypto_destroy(context, crypto);
|
||||||
free_EncryptedData(&enc_data);
|
|
||||||
if(ret){
|
if(ret){
|
||||||
if(hdb_next_enctype2key(context, client,
|
if(hdb_next_enctype2key(context, client,
|
||||||
enc_data.etype, &pa_key) == 0)
|
enc_data.etype, &pa_key) == 0)
|
||||||
goto try_next_key;
|
goto try_next_key;
|
||||||
|
free_EncryptedData(&enc_data);
|
||||||
e_text = "Failed to decrypt PA-DATA";
|
e_text = "Failed to decrypt PA-DATA";
|
||||||
kdc_log (5, "Failed to decrypt PA-DATA -- %s",
|
kdc_log (5, "Failed to decrypt PA-DATA -- %s",
|
||||||
client_name);
|
client_name);
|
||||||
ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
|
ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
|
||||||
continue;
|
continue;
|
||||||
}
|
}
|
||||||
|
free_EncryptedData(&enc_data);
|
||||||
ret = decode_PA_ENC_TS_ENC(ts_data.data,
|
ret = decode_PA_ENC_TS_ENC(ts_data.data,
|
||||||
ts_data.length,
|
ts_data.length,
|
||||||
&p,
|
&p,
|
||||||
|
Reference in New Issue
Block a user