[patch] Patch for use after free in authenticate_user_krb5pwd()

mod_auth_kerb-krb5_kt_close.patch (text/plain), 702 bytes, created by Johan Ymerson on 2018-12-13 10:01:05 UTC

diff -ruN mod_auth_kerb-5.4.orig/src/mod_auth_kerb.c mod_auth_kerb-5.4/src/mod_auth_kerb.c
--- mod_auth_kerb-5.4.orig/src/mod_auth_kerb.c	2018-12-12 16:59:43.762013269 +0100
+++ mod_auth_kerb-5.4/src/mod_auth_kerb.c	2018-12-12 16:59:59.151945123 +0100
@@ -799,11 +799,9 @@
 	            "failed to verify krb5 credentials: %s",
 		          krb5_get_err_text(context, ret));
          krb5_kt_end_seq_get(context, keytab, &cursor);
-         krb5_kt_close(context, keytab);
          goto end;
        }
        krb5_kt_end_seq_get(context, keytab, &cursor);
-       krb5_kt_close(context, keytab);
      }
      else {
        if ((ret = verify_krb5_init_creds(r, context, &creds, server, keytab))) {