Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable X-RT-Original-Encoding: us-ascii Content-Length: 2593

Hi Team,

 

In krb5-1.16.1/src/lib/krb5/os/hostrealm_domain.c,

domain_fallback_realm() assigns the storage returned from strdup() to uhost,

but later if calling profile_get_integer() fails, this function returns without freeing the storage uhost points to.

 

The fix is simple, just call "goto cleanup" instead of "return ret" if calling profile_get_integer() fails.

 

Could someone help to take a look?

 

Thanks,

Bean