Bug 708516 - memory leak during kdc TGS request
Summary: memory leak during kdc TGS request
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: krb5
Version: 5.6
Hardware: i386
OS: Linux
unspecified
medium
Target Milestone: rc
: ---
Assignee: Nalin Dahyabhai
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2011-05-27 20:50 UTC by jbarbuc
Modified: 2019-07-17 11:58 UTC (History)
4 users (show)

Fixed In Version: krb5-1.6.1-67.el5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-02-21 03:19:20 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
initialize subkey and free if needed (766 bytes, patch)
2011-05-27 20:50 UTC, jbarbuc
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:0306 0 normal SHIPPED_LIVE Low: krb5 security and bug fix update 2012-02-21 07:24:53 UTC

Description jbarbuc 2011-05-27 20:50:06 UTC
Created attachment 501392 [details]
initialize subkey and free if needed

Description of problem:

kdc do_tgs_req.c is missing upstream code that frees the subkey
when it is present

Version-Release number of selected component (if applicable):
krb5-1.6.1-55.el5_6.1


Additional info:


==2555== 48 (32 direct, 16 indirect) bytes in 2 blocks are definitely lost in loss record 14 of 23
==2555==    at 0x4822903: malloc (vg_replace_malloc.c:195)
==2555==    by 0x4912768: krb5_copy_keyblock (copy_key.c:40)
==2555==    by 0x490F631: krb5_auth_con_getrecvsubkey (auth_con.c:223)
==2555==    by 0x10FB3D: kdc_process_tgs_req (kdc_util.c:316)
==2555==    by 0x10D0E1: process_tgs_req (do_tgs_req.c:118)
==2555==    by 0x10B877: dispatch (dispatch.c:89)
==2555==    by 0x1175F8: process_packet (network.c:746)
==2555==    by 0x115A0F: listen_and_process (network.c:1057)
==2555==    by 0x1155C6: main (main.c:738)
==2555==

Comment 5 errata-xmlrpc 2012-02-21 03:19:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-0306.html


Note You need to log in before you can comment on or make changes to this bug.