mirror of
https://git.libssh.org/projects/libssh.git
synced 2025-12-05 01:02:39 +03:00
gssapi: Free output token on exit path (GHSL-2023-039)
Thanks Phil Turnbull from GitHub Signed-off-by: Jakub Jelen <jjelen@redhat.com> Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
committed by
Andreas Schneider
parent
23ff6f9388
commit
ccc87f5593
@@ -1031,6 +1031,8 @@ SSH_PACKET_CALLBACK(ssh_packet_userauth_gssapi_token_client){
|
||||
ssh_packet_send(session);
|
||||
}
|
||||
|
||||
gss_release_buffer(&min_stat, &output_token);
|
||||
|
||||
if (maj_stat == GSS_S_COMPLETE) {
|
||||
ssh_gssapi_send_mic(session);
|
||||
session->auth.state = SSH_AUTH_STATE_GSSAPI_MIC_SENT;
|
||||
|
||||
Reference in New Issue
Block a user