lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2025-12-03 13:31:11 +03:00
Code Activity

gssapi: Free both_supported on error paths (GHSL-2023-033)

Browse Source 
Thanks Phil Turnbull from GitHub

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2023-03-06 12:16:20 +01:00
committed by Andreas Schneider
parent 14f3910d12
commit 2b5bef9c03
1 changed files with 5 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
src/gssapi.c
View File

@@ -229,6 +229,7 @@ ssh_gssapi_handle_userauth(ssh_session session, const char *user,
"indicate mechs",
maj_stat,
min_stat);
gss_release_oid_set(&min_stat, &both_supported);
return SSH_ERROR;
}
@@ -265,8 +266,10 @@ ssh_gssapi_handle_userauth(ssh_session session, const char *user,
return SSH_OK;
}
/* from now we have room for context */
if (ssh_gssapi_init(session) == SSH_ERROR)
if (ssh_gssapi_init(session) == SSH_ERROR) {
gss_release_oid_set(&min_stat, &both_supported);
return SSH_ERROR;
}
name_buf.value = service_name;
name_buf.length = strlen(name_buf.value) + 1;
@@ -278,6 +281,7 @@ ssh_gssapi_handle_userauth(ssh_session session, const char *user,
"importing name",
maj_stat,
min_stat);
gss_release_oid_set(&min_stat, &both_supported);
return -1;
}