The branch, master has been updated
       via  6b89848 pam: Fix CID 1034871 Resource leak
       via  ad3e38f pam: Fix CID 1034870 Resource leak
       via  de1bf29 lib: Fix CID 1273073 Assign instead of compare
       via  78fb663 smbd: Fix CID 1273088 Resource leak
       via  ddb84ef aio_fork: Fix CID 1273291 Uninitialized scalar variable
      from  7be3a5f tevent: Ignore unexpected signal events in the same way the 
epoll backend does.

https://git.samba.org/?p=samba.git;a=shortlog;h=master


- Log -----------------------------------------------------------------
commit 6b898481afc7f2d20ca679632b516359e7afaf6a
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 3 16:12:03 2015 +0100

    pam: Fix CID 1034871 Resource leak
    
    Signed-off-by: Volker Lendecke <v...@samba.org>
    Reviewed-by: Ralph Boehme <s...@samba.org>
    
    Autobuild-User(master): Ralph Böhme <s...@samba.org>
    Autobuild-Date(master): Tue Mar  3 20:03:25 CET 2015 on sn-devel-104

commit ad3e38f6bb65fdf16cc792b97333a74d49f345bf
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 3 16:11:26 2015 +0100

    pam: Fix CID 1034870 Resource leak
    
    Signed-off-by: Volker Lendecke <v...@samba.org>
    Reviewed-by: Ralph Boehme <s...@samba.org>

commit de1bf29d250849ebea1a3badd3e881035c1897b0
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 3 15:57:02 2015 +0100

    lib: Fix CID 1273073 Assign instead of compare
    
    This is a brown paper bag thingy, right?
    
    Signed-off-by: Volker Lendecke <v...@samba.org>
    Reviewed-by: Ralph Boehme <s...@samba.org>

commit 78fb663d4c29f9a226c26001492cbc7a9a701668
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 3 15:53:34 2015 +0100

    smbd: Fix CID 1273088 Resource leak
    
    Signed-off-by: Volker Lendecke <v...@samba.org>
    Reviewed-by: Ralph Boehme <s...@samba.org>

commit ddb84ef2d39524149ffe74d752993ca93547b9be
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 3 15:48:46 2015 +0100

    aio_fork: Fix CID 1273291 Uninitialized scalar variable
    
    The previous code left msg.msg_flags uninitialized
    
    Signed-off-by: Volker Lendecke <v...@samba.org>
    Reviewed-by: Ralph Boehme <s...@samba.org>

-----------------------------------------------------------------------

Summary of changes:
 lib/util/close_low_fd.c        | 2 +-
 nsswitch/pam_winbind.c         | 6 +++++-
 source3/modules/vfs_aio_fork.c | 4 +---
 source3/smbd/smb2_setinfo.c    | 1 +
 4 files changed, 8 insertions(+), 5 deletions(-)


Changeset truncated at 500 lines:

diff --git a/lib/util/close_low_fd.c b/lib/util/close_low_fd.c
index b11d25f..5e74918 100644
--- a/lib/util/close_low_fd.c
+++ b/lib/util/close_low_fd.c
@@ -28,7 +28,7 @@ _PUBLIC_ int close_low_fd(int fd)
 
        dev_null = open("/dev/null", O_RDWR, 0);
 
-       if ((dev_null == -1) && (errno = ENFILE)) {
+       if ((dev_null == -1) && (errno == ENFILE)) {
                /*
                 * Try to free up an fd
                 */
diff --git a/nsswitch/pam_winbind.c b/nsswitch/pam_winbind.c
index f1b88cb..1e16741 100644
--- a/nsswitch/pam_winbind.c
+++ b/nsswitch/pam_winbind.c
@@ -2436,6 +2436,7 @@ static char* winbind_upn_to_username(struct pwb_context 
*ctx,
        char *domain = NULL;
        char *name;
        char *p;
+       char *result;
 
        /* This cannot work when the winbind separator = @ */
 
@@ -2467,7 +2468,10 @@ static char* winbind_upn_to_username(struct pwb_context 
*ctx,
                return NULL;
        }
 
-       return talloc_asprintf(ctx, "%s%c%s", domain, sep, name);
+       result = talloc_asprintf(ctx, "%s%c%s", domain, sep, name);
+       wbcFreeMemory(domain);
+       wbcFreeMemory(name);
+       return result;
 }
 
 static int _pam_delete_cred(pam_handle_t *pamh, int flags,
diff --git a/source3/modules/vfs_aio_fork.c b/source3/modules/vfs_aio_fork.c
index bf29dd1..06f38c2 100644
--- a/source3/modules/vfs_aio_fork.c
+++ b/source3/modules/vfs_aio_fork.c
@@ -203,15 +203,13 @@ static ssize_t read_fd(int fd, void *ptr, size_t nbytes, 
int *recvfd)
 
 static ssize_t write_fd(int fd, void *ptr, size_t nbytes, int sendfd)
 {
-       struct msghdr msg;
+       struct msghdr msg = {0};
        size_t bufsize = msghdr_prep_fds(NULL, NULL, 0, &sendfd, 1);
        uint8_t buf[bufsize];
        struct iovec iov;
        ssize_t sent;
 
        msghdr_prep_fds(&msg, buf, bufsize, &sendfd, 1);
-       msg.msg_name = NULL;
-       msg.msg_namelen = 0;
 
        iov.iov_base = (void *)ptr;
        iov.iov_len = nbytes;
diff --git a/source3/smbd/smb2_setinfo.c b/source3/smbd/smb2_setinfo.c
index e6981d1..3f7bbec 100644
--- a/source3/smbd/smb2_setinfo.c
+++ b/source3/smbd/smb2_setinfo.c
@@ -474,6 +474,7 @@ static struct tevent_req *smbd_smb2_setinfo_send(TALLOC_CTX 
*mem_ctx,
                        lck = get_existing_share_mode_lock(mem_ctx,
                                                        fsp->file_id);
                        if (lck == NULL) {
+                               SAFE_FREE(data);
                                tevent_req_nterror(req,
                                        NT_STATUS_UNSUCCESSFUL);
                                return tevent_req_post(req, ev);


-- 
Samba Shared Repository

Reply via email to