[krbdev.mit.edu #8704] git commit
"Greg Hudson via RT" <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.bugs |
|---|---|
| Message-ID | <[email protected]> |
Fix OTP secret file leak and whitespace removal In read_secret_file() in the OTP kdcpreauth module, add a cleanup label and free filename on exit. Also fix the whitespace stripping code to correctly find the end offset, and use size_t rather than int offsets. The leak was reported by Bean Zhang. (cherry picked from commit 396c736c0add2e13f4a9aaaefc9c86445b701953) https://github.com/krb5/krb5/commit/e5d7803051f2d5d8d3b58926693fe63f3cef4380 Author: Greg Hudson <[email protected]> Commit: e5d7803051f2d5d8d3b58926693fe63f3cef4380 Branch: krb5-1.15 src/plugins/preauth/otp/otp_state.c | 15 +++++++++------ 1 files changed, 9 insertions(+), 6 deletions(-)