Fix "--realm" parameter processing in ipa-rmkeytab. Also make sure that memory allocated in this process is freed.
https://fedorahosted.org/freeipa/ticket/711
>From 4de5774a8e16f47f3ff40da096ea7b8fa0693e96 Mon Sep 17 00:00:00 2001 From: Martin Kosek <mko...@redhat.com> Date: Mon, 10 Jan 2011 09:55:57 +0100 Subject: [PATCH] Uninitialized pointer read in ipa-rmkeytab Fix "--realm" parameter processing in ipa-rmkeytab. Also make sure that memory allocated in this process is also freed. https://fedorahosted.org/freeipa/ticket/711 --- ipa-client/ipa-rmkeytab.c | 15 ++++++++++----- 1 files changed, 10 insertions(+), 5 deletions(-) diff --git a/ipa-client/ipa-rmkeytab.c b/ipa-client/ipa-rmkeytab.c index 0320045d00bb3e386883530b5e26babe1bffaacb..ce31a33a27977c90087155e50a6705e4b7e40e15 100644 --- a/ipa-client/ipa-rmkeytab.c +++ b/ipa-client/ipa-rmkeytab.c @@ -148,8 +148,8 @@ main(int argc, const char **argv) krb5_error_code krberr; krb5_keytab ktid; krb5_kt_cursor cursor; - char * ktname; - char * atrealm; + char * ktname = NULL; + char * atrealm = NULL; poptContext pc; static const char *keytab = NULL; static const char *principal = NULL; @@ -201,14 +201,16 @@ main(int argc, const char **argv) * the string we pass in looks like a realm. */ if (realm) { - if (realm[0] != '@') + if (realm[0] != '@') { ret = asprintf(&atrealm, "@%s", realm); if (ret == -1) { rval = 2; goto cleanup; } - else - atrealm = strcpy(atrealm, realm); + } + else { + atrealm = strdup(realm); + } } krberr = krb5_kt_resolve(context, ktname, &ktid); @@ -247,5 +249,8 @@ cleanup: poptFreeContext(pc); + if (atrealm) free(atrealm); + if (ktname) free(ktname); + return rval; } -- 1.7.3.4
_______________________________________________ Freeipa-devel mailing list Freeipa-devel@redhat.com https://www.redhat.com/mailman/listinfo/freeipa-devel
