From 0077086cad1b0121241f151a4b3117c3893c44aa Mon Sep 17 00:00:00 2001 From: Lukas Slebodnik Date: Mon, 4 Jul 2016 09:53:06 +0200 Subject: [PATCH] IPA: Fix uninitialized pointer read (UNINIT) We try to release sdap_handle in the function sdap_cli_connect_recv. Therefore we might try to release memory which does not belong to us due to uninitialized pointer. 2070 if (gsh) { 6. read_parm: Reading a parameter value. 2071 if (*gsh) { 2072 talloc_zfree(*gsh); 2073 } --- src/providers/ipa/ipa_auth.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/providers/ipa/ipa_auth.c b/src/providers/ipa/ipa_auth.c index ad0a89bfeac315532dea25a981d409e9eef46081..5fee03baefebcc9211b52772c41e2623471e5248 100644 --- a/src/providers/ipa/ipa_auth.c +++ b/src/providers/ipa/ipa_auth.c @@ -312,7 +312,7 @@ static void ipa_pam_auth_handler_connect_done(struct tevent_req *subreq) { struct ipa_pam_auth_handler_state *state; struct tevent_req *req; - struct sdap_handle *sh; + struct sdap_handle *sh = NULL; const char *attrs[] = {SYSDB_ORIG_DN, NULL}; struct ldb_message *msg; const char *dn; -- 2.7.4