X-Git-Url: https://git.decadent.org.uk/gitweb/?p=nfs-utils.git;a=blobdiff_plain;f=utils%2Fgssd%2Fsvcgssd_proc.c;h=14b7f17c61bd0ded02a0885f8c14230bebbadc22;hp=b43a023882675d6788fe758010fe4e7dddb18f95;hb=cddf69516911d84fcbcbe3cdc225b5e56cd7e012;hpb=4fde9011946076918021a7007408b0d9802e80d0

diff --git a/utils/gssd/svcgssd_proc.c b/utils/gssd/svcgssd_proc.c
index b43a023..14b7f17 100644
--- a/utils/gssd/svcgssd_proc.c
+++ b/utils/gssd/svcgssd_proc.c
@@ -193,7 +193,6 @@ get_ids(gss_name_t client_name, gss_OID mech, struct svc_cred *cred)
 	uid_t		uid, gid;
 	gss_OID		name_type = GSS_C_NO_OID;
 	char		*secname;
-	gid_t		*groups;
 
 	maj_stat = gss_display_name(&min_stat, client_name, &name, &name_type);
 	if (maj_stat != GSS_S_COMPLETE) {
@@ -204,10 +203,12 @@ get_ids(gss_name_t client_name, gss_OID mech, struct svc_cred *cred)
 	if (!(sname = calloc(name.length + 1, 1))) {
 		printerr(0, "WARNING: get_ids: error allocating %d bytes "
 			"for sname\n", name.length + 1);
+		gss_release_buffer(&min_stat, &name);
 		goto out;
 	}
 	memcpy(sname, name.value, name.length);
 	printerr(1, "sname = %s\n", sname);
+	gss_release_buffer(&min_stat, &name);
 
 	res = -EINVAL;
 	if ((secname = mech2file(mech)) == NULL) {
@@ -282,6 +283,7 @@ handle_nullreq(FILE *f) {
 				in_handle = {.value = in_handle_buf},
 				out_handle = {.value = out_handle_buf},
 				ctx_token = {.value = NULL},
+				ignore_out_tok = {.value = NULL},
 	/* XXX isn't there a define for this?: */
 				null_token = {.value = NULL};
 	u_int32_t		ret_flags;
@@ -289,6 +291,7 @@ handle_nullreq(FILE *f) {
 	gss_name_t		client_name;
 	gss_OID			mech = GSS_C_NO_OID;
 	u_int32_t		maj_stat = GSS_S_FAILURE, min_stat = 0;
+	u_int32_t		ignore_min_stat;
 	struct svc_cred		cred;
 	static char		*lbuf = NULL;
 	static int		lbuflen = 0;
@@ -353,8 +356,10 @@ handle_nullreq(FILE *f) {
 	if (get_ids(client_name, mech, &cred)) {
 		/* get_ids() prints error msg */
 		maj_stat = GSS_S_BAD_NAME; /* XXX ? */
+		gss_release_name(&ignore_min_stat, &client_name);
 		goto out_err;
 	}
+	gss_release_name(&ignore_min_stat, &client_name);
 
 
 	/* Context complete. Pass handle_seq in out_handle to use
@@ -365,12 +370,15 @@ handle_nullreq(FILE *f) {
 
 	/* kernel needs ctx to calculate verifier on null response, so
 	 * must give it context before doing null call: */
-	if (serialize_context_for_kernel(ctx, &ctx_token)) {
+	if (serialize_context_for_kernel(ctx, &ctx_token, mech)) {
 		printerr(0, "WARNING: handle_nullreq: "
 			    "serialize_context_for_kernel failed\n");
 		maj_stat = GSS_S_FAILURE;
 		goto out_err;
 	}
+	/* We no longer need the gss context */
+	gss_delete_sec_context(&ignore_min_stat, &ctx, &ignore_out_tok);
+
 	do_svc_downcall(&out_handle, &cred, mech, &ctx_token);
 continue_needed:
 	send_response(f, &in_handle, &in_tok, maj_stat, min_stat,
@@ -378,10 +386,14 @@ continue_needed:
 out:
 	if (ctx_token.value != NULL)
 		free(ctx_token.value);
+	if (out_tok.value != NULL)
+		gss_release_buffer(&ignore_min_stat, &out_tok);
 	printerr(1, "finished handling null request\n");
 	return;
 
 out_err:
+	if (ctx != GSS_C_NO_CONTEXT)
+		gss_delete_sec_context(&ignore_min_stat, &ctx, &ignore_out_tok);
 	send_response(f, &in_handle, &in_tok, maj_stat, min_stat,
 			&null_token, &null_token);
 	goto out;