Skip Menu |
 

Subject: krb5_change_set_password not freeing chpw_rep contents
krb5_change_set_password calls krb5int_sendto which places the reply buffer data in chpw_rep.
This data is not freed.
From: lxs@mit.edu
Subject: SVN Commit

krb5_change_set_password should free chpw_rep contents

Commit By: lxs



Revision: 20902
Changed Files:
U trunk/src/lib/krb5/os/changepw.c
Subject: krb5_change_set_password not freeing chpw_rep contents
krb5_change_set_password calls krb5int_sendto which places the reply buffer data in chpw_rep.
This data is not freed.
Fixed, but passing onto Greg so he can check if the static analysis tools found this one.
[lxs - Tue Oct 21 17:07:40 2008]:

Show quoted text
> Fixed, but passing onto Greg so he can check if the static analysis
> tools found this one.

Doesn't look like the tool caught this. I don't know how I could find
out why; but this is a good indication that runtime leak analysis will
find different leaks than Coverity status analysis.

(Patch reviewed, resolving ticket.)