diff options
| author | Günther Deschner <gd@samba.org> | 2020-03-27 10:13:11 +0100 |
|---|---|---|
| committer | Günther Deschner <gd@samba.org> | 2020-03-30 13:01:20 +0000 |
| commit | 047b0d8ab534c7a10a8572fd9f21e2456fd30710 (patch) | |
| tree | 4036fc64217c6c8109e9e530f0639c90454a9671 /nsswitch | |
| parent | c4ccdf4b30de1b1e63d3fd99d33b924b816a5d37 (diff) | |
| download | samba-047b0d8ab534c7a10a8572fd9f21e2456fd30710.tar.gz | |
nsswitch: fix use-after-free causing segfault in _pam_delete_cred
BUG: https://bugzilla.samba.org/show_bug.cgi?id=14327
Guenther
Signed-off-by: Guenther Deschner <gd@samba.org>
Reviewed-by: Alexander Bokovoy <ab@samba.org>
Autobuild-User(master): Günther Deschner <gd@samba.org>
Autobuild-Date(master): Mon Mar 30 13:01:20 UTC 2020 on sn-devel-184
Diffstat (limited to 'nsswitch')
| -rw-r--r-- | nsswitch/pam_winbind.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c index 3ad70d3c4cd..7af03fe2bd0 100644 --- a/nsswitch/pam_winbind.c +++ b/nsswitch/pam_winbind.c @@ -2609,7 +2609,6 @@ static int _pam_delete_cred(pam_handle_t *pamh, int flags, wbc_status = wbcCtxLogoffUserEx(ctx->wbc_ctx, &logoff, &error); retval = wbc_auth_error_to_pam_error(ctx, error, wbc_status, user, "wbcLogoffUser"); - wbcFreeMemory(error); wbcFreeMemory(logoff.blobs); logoff.blobs = NULL; @@ -2629,6 +2628,7 @@ out: retval = wbc_auth_error_to_pam_error(ctx, error, wbc_status, user, "wbcLogoffUser"); } + wbcFreeMemory(error); /* * Delete the krb5 ccname variable from the PAM environment |