Bugzilla will be upgraded to version 5.0. The upgrade date is tentatively scheduled for 2 December 2018, pending final testing and feedback.
First Last Prev Next    This bug is not in your last search results.
Bug 708516 - memory leak during kdc TGS request
memory leak during kdc TGS request
Status: CLOSED ERRATA
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: krb5 (Show other bugs)
5.6
i386 Linux
unspecified Severity medium
: rc
: ---
Assigned To: Nalin Dahyabhai
BaseOS QE Security Team
:
Depends On:
Blocks:
  Show dependency tree / graph
 
Reported: 2011-05-27 16:50 EDT by jbarbuc
Modified: 2012-11-06 09:15 EST (History)
4 users (show)

See Also:
Fixed In Version: krb5-1.6.1-67.el5
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2012-02-20 22:19:20 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)
initialize subkey and free if needed (766 bytes, patch)
2011-05-27 16:50 EDT, jbarbuc 		no flags Details | Diff
Add an attachment (proposed patch, testcase, etc.)


External Trackers
Tracker ID Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:0306 normal SHIPPED_LIVE Low: krb5 security and bug fix update 2012-02-21 02:24:53 EST

  None (edit)
Description jbarbuc 2011-05-27 16:50:06 EDT 
Created attachment 501392 [details]
initialize subkey and free if needed

Description of problem:

kdc do_tgs_req.c is missing upstream code that frees the subkey
when it is present

Version-Release number of selected component (if applicable):
krb5-1.6.1-55.el5_6.1


Additional info:


==2555== 48 (32 direct, 16 indirect) bytes in 2 blocks are definitely lost in loss record 14 of 23
==2555==    at 0x4822903: malloc (vg_replace_malloc.c:195)
==2555==    by 0x4912768: krb5_copy_keyblock (copy_key.c:40)
==2555==    by 0x490F631: krb5_auth_con_getrecvsubkey (auth_con.c:223)
==2555==    by 0x10FB3D: kdc_process_tgs_req (kdc_util.c:316)
==2555==    by 0x10D0E1: process_tgs_req (do_tgs_req.c:118)
==2555==    by 0x10B877: dispatch (dispatch.c:89)
==2555==    by 0x1175F8: process_packet (network.c:746)
==2555==    by 0x115A0F: listen_and_process (network.c:1057)
==2555==    by 0x1155C6: main (main.c:738)
==2555==
Comment 5 errata-xmlrpc 2012-02-20 22:19:20 EST 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0306.html
Note You need to log in before you can comment on or make changes to this bug.
First Last Prev Next    This bug is not in your last search results.