| commit | 3476f790df380924b740d0777bc9f56733927432 | |
| author | Volker Lendecke <vl@samba.org> | |
| Sat, 9 Jan 2010 19:22:00 +0000 (9 20:22 +0100) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Mon, 25 Jan 2010 09:59:23 +0000 (25 10:59 +0100) | ||
| tree | a3ff5c0be88a43e41b42aa83ee420a80cec9a4e6 | treesnapshot (tar.gz zip) |
| parent | 6d79f2553419d411b7a73187945a63b0dc168be6 | commitdiff |
s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This means
with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the blob
after the ntlmssp_end().
(cherry picked from commit 43c841b6bd92e987109df81b6b8a2b85f21b0181)
Addresses bug #7027 (winbindd crash in winbindd_dual_ccache_ntlm_auth due to
freed memory reference.)
(cherry picked from commit 26faf1262fc2f0fa2d8c2874150852ac36951162)
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This means
with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the blob
after the ntlmssp_end().
(cherry picked from commit 43c841b6bd92e987109df81b6b8a2b85f21b0181)
Addresses bug #7027 (winbindd crash in winbindd_dual_ccache_ntlm_auth due to
freed memory reference.)
(cherry picked from commit 26faf1262fc2f0fa2d8c2874150852ac36951162)
| source3/winbindd/winbindd_ccache_access.c | diffblobblamehistory |