From 88c9f6820bafc74a93487e5d7d4b24768bd157a6 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Tue, 5 Nov 2013 14:04:20 +0100 Subject: CVE-2013-4496:s3:auth: fix memory leak in the ACCOUNT_LOCKED_OUT case. Bug: https://bugzilla.samba.org/show_bug.cgi?id=10245 Signed-off-by: Stefan Metzmacher Reviewed-by: Jeremy Allison Signed-off-by: Andrew Bartlett Reviewed-by: Andreas Schneider --- source3/auth/check_samsec.c | 1 + 1 file changed, 1 insertion(+) diff --git a/source3/auth/check_samsec.c b/source3/auth/check_samsec.c index f918dc0db19..e2c42d6dc47 100644 --- a/source3/auth/check_samsec.c +++ b/source3/auth/check_samsec.c @@ -408,6 +408,7 @@ NTSTATUS check_sam_security(const DATA_BLOB *challenge, /* Quit if the account was locked out. */ if (pdb_get_acct_ctrl(sampass) & ACB_AUTOLOCK) { DEBUG(3,("check_sam_security: Account for user %s was locked out.\n", username)); + TALLOC_FREE(sampass); return NT_STATUS_ACCOUNT_LOCKED_OUT; } -- cgit v1.2.1