Skip Menu |
 

Subject: incorrect memory allocation in send_tgs 1.4.1
Date: Tue, 2 May 2006 11:16:19 -0700
From: "Paul Moore" <paul.moore@centrify.com>
To: <krb5-bugs@mit.edu>
send_tgs.c accepts additional padata. If this is supplied to it then
there is an incorrect memory allocation

at line 230

for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc(i+2);

should read

for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc((i+2) *
sizeof(*combined_padata));
From: raeburn@mit.edu
Subject: CVS Commit
* send_tgs.c (krb5_send_tgs): Fix memory allocation size when padata is
provided.

Commit By: raeburn



Revision: 17988
Changed Files:
U trunk/src/lib/krb5/krb/send_tgs.c