| commit | 26faf1262fc2f0fa2d8c2874150852ac36951162 | |
| author | Volker Lendecke <vl@samba.org> | |
| Sat, 9 Jan 2010 19:22:00 +0000 (9 20:22 +0100) | ||
| committer | Karolin Seeger <kseeger@samba.org> | |
| Wed, 13 Jan 2010 08:04:54 +0000 (13 09:04 +0100) | ||
| tree | 61fcbb7c81c93e31aa7ad26cd4c09437b8df167b | treesnapshot (tar.gz zip) |
| parent | e687a20d60144af2cb459231fb6a699f2533ce9d | commitdiff |
s3: Fix a segfault in winbindd_dual_ccache_ntlm_auth()
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This means
with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the blob
after the ntlmssp_end().
(cherry picked from commit 43c841b6bd92e987109df81b6b8a2b85f21b0181)
Addresses bug #7027 (winbindd crash in winbindd_dual_ccache_ntlm_auth due to
freed memory reference.)
ntlmssp_update allocates the reply_blob as a child of ntlmssp_state. This means
with ntlmss_end() it will be gone. winbindd_dual_ccache_ntlm_auth used the blob
after the ntlmssp_end().
(cherry picked from commit 43c841b6bd92e987109df81b6b8a2b85f21b0181)
Addresses bug #7027 (winbindd crash in winbindd_dual_ccache_ntlm_auth due to
freed memory reference.)
| source3/winbindd/winbindd_ccache_access.c | diffblobblamehistory |