Subject: | incorrect memory allocation in send_tgs 1.4.1 |
Date: | Tue, 2 May 2006 11:16:19 -0700 |
From: | "Paul Moore" <paul.moore@centrify.com> |
To: | <krb5-bugs@mit.edu> |
send_tgs.c accepts additional padata. If this is supplied to it then
there is an incorrect memory allocation
at line 230
for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc(i+2);
should read
for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc((i+2) *
sizeof(*combined_padata));
there is an incorrect memory allocation
at line 230
for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc(i+2);
should read
for (counter = padata; *counter; counter++, i++);
combined_padata = (krb5_pa_data **)malloc((i+2) *
sizeof(*combined_padata));