From d8af2eb730191008e0c628ec5023176b6fc388ca Mon Sep 17 00:00:00 2001 From: Luke Howard Date: Tue, 14 Dec 2021 12:12:40 +1100 Subject: [PATCH] kdc: don't leak armor crypto in TGS path 9b55215a added support for FAST in the TGS (#805) but forgot to free the armor crypto context. --- kdc/krb5tgs.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/kdc/krb5tgs.c b/kdc/krb5tgs.c index 90d782009..d4d92361d 100644 --- a/kdc/krb5tgs.c +++ b/kdc/krb5tgs.c @@ -2423,6 +2423,10 @@ out: free(csec); free(cusec); + if (r->armor_crypto) { + krb5_crypto_destroy(r->context, r->armor_crypto); + r->armor_crypto = NULL; + } krb5_free_keyblock_contents(r->context, &r->reply_key); krb5_free_keyblock_contents(r->context, &r->strengthen_key);