The branch, v3-3-test has been updated
       via  4d0cfb46e449e85646e05df2c4efe7dffa670edd (commit)
      from  97cdf68a42bd9d5ec312151bcca9830228caeee1 (commit)

http://gitweb.samba.org/?p=samba.git;a=shortlog;h=v3-3-test


- Log -----------------------------------------------------------------
commit 4d0cfb46e449e85646e05df2c4efe7dffa670edd
Author: Volker Lendecke <v...@samba.org>
Date:   Tue Mar 24 15:25:56 2009 -0700

    Fix two memleaks in the encryption code
    
    ntlmssp_seal_packet creates its own signature data blob, which we then
    have to free.
    
    Jeremy, please check and merge appropriately (Yes, I'm asking you to do the
    janitor work, I want you to *look* at this :-))
    
    Volker

-----------------------------------------------------------------------

Summary of changes:
 source/libsmb/smb_seal.c |    3 ++-
 1 files changed, 2 insertions(+), 1 deletions(-)


Changeset truncated at 500 lines:

diff --git a/source/libsmb/smb_seal.c b/source/libsmb/smb_seal.c
index 795c8bc..2f7305c 100644
--- a/source/libsmb/smb_seal.c
+++ b/source/libsmb/smb_seal.c
@@ -136,7 +136,7 @@ NTSTATUS common_ntlm_encrypt_buffer(NTLMSSP_STATE 
*ntlmssp_state,
 
        smb_set_enclen(buf_out, smb_len(buf) + NTLMSSP_SIG_SIZE, enc_ctx_num);
 
-       sig = data_blob(NULL, NTLMSSP_SIG_SIZE);
+       ZERO_STRUCT(sig);
 
        status = ntlmssp_seal_packet(ntlmssp_state,
                (unsigned char *)buf_out + 8 + NTLMSSP_SIG_SIZE, /* 4 byte len 
+ 0xFF 'S' <enc> <ctx> */
@@ -153,6 +153,7 @@ NTSTATUS common_ntlm_encrypt_buffer(NTLMSSP_STATE 
*ntlmssp_state,
 
        /* First 16 data bytes are signature for SSPI compatibility. */
        memcpy(buf_out + 8, sig.data, NTLMSSP_SIG_SIZE);
+       data_blob_free(&sig);
        *ppbuf_out = buf_out;
        return NT_STATUS_OK;
 }


-- 
Samba Shared Repository

Reply via email to