gssapi: Release output_token (GHSL-2023-037)

Thanks Phil Turnbull from GitHub

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Norbert Pocs <npocs@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
This commit is contained in:
Jakub Jelen
2023-03-06 12:24:27 +01:00
parent f73dac8eed
commit d7f18c468e

View File

@@ -912,6 +912,8 @@ SSH_PACKET_CALLBACK(ssh_packet_userauth_gssapi_response){
ssh_packet_send(session);
session->auth.state = SSH_AUTH_STATE_GSSAPI_TOKEN;
}
gss_release_buffer(&min_stat, &output_token);
return SSH_PACKET_USED;
error: