ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Merge branch '2620-free-resources-when-gss_accept_sec_context-fails-v9_16' into 'v9_16'

Browse Source 
[v9_16] Free resources when gss_accept_sec_context() fails

See merge request isc-projects/bind9!4874
This commit is contained in:
Michał Kępień
2021-04-08 09:04:09 +00:00
parent 21b0eac026 ef4460949f
commit e02df06d8e
2 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
CHANGES
View File

@@ -1,3 +1,6 @@
5614. [bug] Ensure all resources are properly cleaned up when a call
to gss_accept_sec_context() fails. [GL #2620]
5613. [bug] It was possible to write an invalid transaction header
in the journal file for a managed-keys database after
upgrading. This has been fixed. Invalid headers in

3
lib/dns/gssapictx.c
View File

@@ -733,6 +733,9 @@ dst_gssapi_acceptctx(dns_gss_cred_id_t cred, const char *gssapi_keytab,
default:
gss_log(3, "failed gss_accept_sec_context: %s",
gss_error_tostring(gret, minor, buf, sizeof(buf)));
if (gouttoken.length > 0U) {
(void)gss_release_buffer(&minor, &gouttoken);
}
return (result);
}