File pam_mount-1.27-fix-krb5-env.dif of Package pam_mount

Overview Repositories Revisions Requests Users Attributes Meta

File pam_mount-1.27-fix-krb5-env.dif of Package pam_mount (Revision abc7ae9d8962c3968a9bdc8db740f0ff)

Currently displaying revision abc7ae9d8962c3968a9bdc8db740f0ff , Show latest

Index: pam_mount-1.27/doc/changelog.txt
===================================================================
--- pam_mount-1.27.orig/doc/changelog.txt
+++ pam_mount-1.27/doc/changelog.txt
@@ -4,6 +4,7 @@ For details, see the history as recorded
 
 Fixes:
 - pam_mount: avoid crash in sudo by not calling setenv() with NULL
+- pam_mount: unwind krb5 environment info at the right time
 - umount.crypt: do not remove entry from /etc/mtab twice
 
 v1.27 (July 01 2009)
Index: pam_mount-1.27/src/pam_mount.c
===================================================================
--- pam_mount-1.27.orig/src/pam_mount.c
+++ pam_mount-1.27/src/pam_mount.c
@@ -550,9 +550,10 @@ PAM_EXTERN EXPORT_SYMBOL int pam_sm_open
 			ret = PAM_SERVICE_ERR;
 		}
 	}
-	memset(system_authtok, 0, strlen(system_authtok));
-	if (krb5 != NULL)
-		unsetenv("KRB5CCNAME");
+	if (system_authtok != NULL) {
+		memset(system_authtok, 0, strlen(system_authtok));
+		free(system_authtok);
+	}
 	modify_pm_count(&Config, Config.user, "1");
 	envpath_restore();
 	if (getuid() == 0)
@@ -570,6 +571,8 @@ PAM_EXTERN EXPORT_SYMBOL int pam_sm_open
 	 */
 	ret = PAM_SUCCESS;
  out:
+	if (krb5 != NULL)
+		unsetenv("KRB5CCNAME");
 	w4rn("done opening session (ret=%d)\n", ret);
 	common_exit();
 	return ret;

Places

File pam_mount-1.27-fix-krb5-env.dif of Package pam_mount (Revision abc7ae9d8962c3968a9bdc8db740f0ff)

Places