oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

kadmind: fix pw leak from CVE-2016-2400 fix

Browse Source
This commit is contained in:
Nicolas Williams
2016-02-29 18:34:57 -06:00
parent 644b45939e
commit e193671854
1 changed files with 2 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
kadmin/server.c
View File

@@ -194,6 +194,8 @@ kadmind_dispatch(void *kadm_handlep, krb5_boolean initial,
ret = check_aliases(contextp, &ent, NULL); ret = check_aliases(contextp, &ent, NULL);
if (ret) { if (ret) {
kadm5_free_principal_ent(kadm_handlep, &ent); kadm5_free_principal_ent(kadm_handlep, &ent);
memset(password, 0, strlen(password));
free(password);
goto fail; goto fail;
} }
} }