File _service:tar_scm_kernel_repo:backport-auditd-cl... of Package audit

File _service:tar_scm_kernel_repo:backport-auditd-cleanup-krb5-memory-leaks-on-error-paths.patch of Package audit (Revision a421a1fd606870dd29d529836869d1a0)

Currently displaying revision a421a1fd606870dd29d529836869d1a0 , Show latest

From f0ce136497ea4f3e7f6e7b05283c1299e76251e7 Mon Sep 17 00:00:00 2001
From: Steve Grubb <sgrubb@redhat.com>
Date: Mon, 11 Jul 2022 12:07:50 -0400
Subject: auditd - cleanup krb5 memory leaks on error paths

Conflict:delete changelog
---
 src/auditd-listen.c | 7 ++++---
 1 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/src/auditd-listen.c b/src/auditd-listen.c
index 5c433e7..c8cae38 100644
--- a/src/auditd-listen.c
+++ b/src/auditd-listen.c
@@ -321,10 +321,11 @@ static void gss_failure(const char *msg, int major_status, int minor_status)
 		gss_failure_2(msg, minor_status, GSS_C_MECH_CODE);
 }
 
-#define KCHECK(x,f) if (x) { \
+#define KCHECK(x,f, k) if (x) { \
 		const char *kstr = krb5_get_error_message(kcontext, x); \
 		audit_msg(LOG_ERR, "krb5 error: %s in %s\n", kstr, f); \
 		krb5_free_error_message(kcontext, kstr); \
+		krb5_free_context(k); \
 		return -1; }
 
 /* These are our private credentials, which come from a key file on
@@ -363,9 +364,9 @@ static int server_acquire_creds(const char *service_name,
 	(void) gss_release_name(&minor_status, &server_name);
 
 	krberr = krb5_init_context(&kcontext);
-	KCHECK (krberr, "krb5_init_context");
+	KCHECK (krberr, "krb5_init_context", kcontext);
 	krberr = krb5_get_default_realm(kcontext, &my_gss_realm);
-	KCHECK (krberr, "krb5_get_default_realm");
+	KCHECK (krberr, "krb5_get_default_realm", kcontext);
 
 	audit_msg(LOG_DEBUG, "GSS creds for %s acquired", service_name);
 
-- 
2.27.0