Ticket History #9065: Fix uncommon PKINIT memory leak

# Wed Jun 08 19:00:04 2022 ghudson@mit.edu (Greg Hudson) - Ticket created

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 706B

Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata(). In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

https://github.com/krb5/krb5/commit/883415036a4b4e0372b84a5a6e46c10b3a67aba0
Author: sashan <anedvedicky@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 883415036a4b4e0372b84a5a6e46c10b3a67aba0
Branch: master
src/plugins/preauth/pkinit/pkinit_srv.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)

# Wed Jun 08 19:00:05 2022 ghudson@mit.edu (Greg Hudson) - Requestor ghudson@mit.edu (Greg Hudson) added

# Wed Jun 08 19:00:05 2022 ghudson@mit.edu (Greg Hudson) - Target_Version 1.20-next added

# Wed Jun 08 19:00:05 2022 ghudson@mit.edu (Greg Hudson) - Target_Version 1.19-next added

# Wed Jun 08 19:00:05 2022 ghudson@mit.edu (Greg Hudson) - Status changed from 'new' to 'resolved'

# Wed Jun 08 19:00:05 2022 ghudson@mit.edu (Greg Hudson) - Tags pullup added

# Tue Nov 15 11:31:01 2022 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.19.4 added

# Tue Nov 15 11:31:01 2022 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 779B

Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata(). In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

(cherry picked from commit 883415036a4b4e0372b84a5a6e46c10b3a67aba0)

https://github.com/krb5/krb5/commit/441736872285e6538e6b6c78eab60862d3b6dcaa
Author: sashan <anedvedicky@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 441736872285e6538e6b6c78eab60862d3b6dcaa
Branch: krb5-1.19
src/plugins/preauth/pkinit/pkinit_srv.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)

# Tue Nov 15 11:32:02 2022 ghudson@mit.edu (Greg Hudson) - Version_Fixed 1.20.1 added

# Tue Nov 15 11:32:02 2022 ghudson@mit.edu (Greg Hudson) - Correspondence added

From:	ghudson@mit.edu
Subject:	git commit

Download (untitled) / with headers
text/plain 779B

Fix uncommon PKINIT memory leak

PKINIT per-request module data objects are normally created by
pkinit_server_verify_padata() and freed by
pkinit_server_return_padata(). In some unusual circumstances, the KDC
may not call the return_padata method after verification succeeds.
Add a free_modreq method and free the object there instead.

[ghudson@mit.edu: rewrote commit message]

(cherry picked from commit 883415036a4b4e0372b84a5a6e46c10b3a67aba0)

https://github.com/krb5/krb5/commit/440c974aee745cd435d5cecc8976d7679ae1f7a6
Author: sashan <anedvedicky@gmail.com>
Committer: Greg Hudson <ghudson@mit.edu>
Commit: 440c974aee745cd435d5cecc8976d7679ae1f7a6
Branch: krb5-1.20
src/plugins/preauth/pkinit/pkinit_srv.c | 9 ++++++++-
1 file changed, 8 insertions(+), 1 deletion(-)

# Tue Nov 15 11:34:25 2022 ghudson@mit.edu (Greg Hudson) - Tags pullup deleted