On Sat, 2002-12-14 at 04:39, Nik Conwell wrote:
> 
> Samba 3.0, alpha 21.
> 
> kerberos_verify.c has:
> 
>       ... krb5_get_permitted_enctypes(context, &enctypes) ...
> 
>       for (i=0;enctypes[i];i++) {
>                 ...
>               if (!(ret = krb5_rd_req(context, &auth_context, &packet, 
>                                      NULL, keytab, NULL, &tkt))) {
>                       krb5_free_ktypes(context, enctypes);
>                         ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>                       break;
>               }
>       }
> 
>       if (!enctypes[i]) {
>             ^^^^^^^^^^^^
>               DEBUG(3,("krb5_rd_req with auth failed (%s)\n", 
>                        error_message(ret)));
>               return NT_STATUS_LOGON_FAILURE;
>       }
> 
> 
> referencing enctypes[] after it's been freed.  Got away w/ the right memory crud
> under Linux, but on AIX (4.3) this sometimes caused (debug 3 and above):

Thanks for that - I've applied it to HEAD and will merge to 3.0 shortly.

Andrew Bartlett

-- 
Andrew Bartlett                                 [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org     http://build.samba.org     http://hawkerc.net

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to