From 19ec009b7db644d80f88d2a5550efd1dbd691fcc Mon Sep 17 00:00:00 2001 From: Jakub Jelen Date: Mon, 6 Mar 2023 12:28:50 +0100 Subject: [PATCH] gssapi: Release actual_mechs on exit (GHSL-2023-040) Thanks Phil Turnbull from GitHub Signed-off-by: Jakub Jelen Reviewed-by: Andreas Schneider --- src/gssapi.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/gssapi.c b/src/gssapi.c index 8f260a99..0a1993b8 100644 --- a/src/gssapi.c +++ b/src/gssapi.c @@ -655,7 +655,7 @@ fail: static int ssh_gssapi_match(ssh_session session, gss_OID_set *valid_oids) { OM_uint32 maj_stat, min_stat, lifetime; - gss_OID_set actual_mechs; + gss_OID_set actual_mechs = GSS_C_NO_OID_SET; gss_buffer_desc namebuf; gss_name_t client_id = GSS_C_NO_NAME; gss_OID oid; @@ -717,6 +717,7 @@ static int ssh_gssapi_match(ssh_session session, gss_OID_set *valid_oids) ret = SSH_OK; end: + gss_release_oid_set(&min_stat, &actual_mechs); gss_release_name(&min_stat, &client_id); return ret; }