Fix memory leak on error path of limit_krb5_enctypes()

Return credential on error path of limit_krb5_enctypes()

Signed-off-by: Kevin Coffman <kwc@citi.umich.edu>
Signed-off-by: Neil Brown <neilb@suse.de>

diff --git a/utils/gssd/krb5_util.c b/utils/gssd/krb5_util.c
index f1682b8ec8701f5090577122869b76cf470c0eb9..a0ee1100d29560fece53042ba5675b9ebbe41ad7 100644 (file)
--- a/utils/gssd/krb5_util.c
+++ b/utils/gssd/krb5_util.c
@@ -298,6 +298,7 @@ limit_krb5_enctypes(struct rpc_gss_sec *sec, uid_t uid)
        if (maj_stat != GSS_S_COMPLETE) {
                pgsserr("gss_set_allowable_enctypes",
                        maj_stat, min_stat, &krb5oid);
        if (maj_stat != GSS_S_COMPLETE) {
                pgsserr("gss_set_allowable_enctypes",
                        maj_stat, min_stat, &krb5oid);

+               gss_release_cred(&min_stat, &credh);

                return -1;
        }
        sec->cred = credh;
                return -1;
        }
        sec->cred = credh;