Skip Menu |
 

Date: Fri, 16 Jul 2010 11:16:18 +0100
Subject: CloseHandle() calls in cc_mslsa.c should be changed to LsaDeregisterLogonProcess()
From: Jamie Kirkpatrick <jkp@kirkconsulting.co.uk>
To: krb5-bugs@mit.edu
I've just tracked down a crasher in cc_msla.c: the code calls LsaConnectUntrusted() to obtain a connection to the LSA server which returns a HANDLE instance.  Unfortunately, the wrong routine is used to free this handle after it has been used: see here - http://msdn.microsoft.com/en-us/library/aa378265(v=VS.85).aspx.

Need to replace calls to CloseHandle() with calls to LsaDeregisterLogonProcess() to fix the issue.

-- 
Jamie Kirkpatrick
07818 422311