Bug 708516

Summary: memory leak during kdc TGS request
Product: Red Hat Enterprise Linux 5 Reporter: jbarbuc
Component: krb5Assignee: Nalin Dahyabhai <nalin>
Status: CLOSED ERRATA QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 5.6CC: dapospis, dpal, jplans, prc
Target Milestone: rc   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: krb5-1.6.1-67.el5 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-21 03:19:20 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
initialize subkey and free if needed none

Description jbarbuc 2011-05-27 20:50:06 UTC 
Created attachment 501392 [details]
initialize subkey and free if needed

Description of problem:

kdc do_tgs_req.c is missing upstream code that frees the subkey
when it is present

Version-Release number of selected component (if applicable):
krb5-1.6.1-55.el5_6.1


Additional info:


==2555== 48 (32 direct, 16 indirect) bytes in 2 blocks are definitely lost in loss record 14 of 23
==2555==    at 0x4822903: malloc (vg_replace_malloc.c:195)
==2555==    by 0x4912768: krb5_copy_keyblock (copy_key.c:40)
==2555==    by 0x490F631: krb5_auth_con_getrecvsubkey (auth_con.c:223)
==2555==    by 0x10FB3D: kdc_process_tgs_req (kdc_util.c:316)
==2555==    by 0x10D0E1: process_tgs_req (do_tgs_req.c:118)
==2555==    by 0x10B877: dispatch (dispatch.c:89)
==2555==    by 0x1175F8: process_packet (network.c:746)
==2555==    by 0x115A0F: listen_and_process (network.c:1057)
==2555==    by 0x1155C6: main (main.c:738)
==2555==
Comment 5 errata-xmlrpc 2012-02-21 03:19:20 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0306.html