From 0c3840e614e49090785ae8b33ff00c59d354c188 Mon Sep 17 00:00:00 2001 From: Huzaifa Sidhpurwala Date: Wed, 16 May 2018 09:16:19 +0530 Subject: [PATCH] Missing return on error causes use-after-free in SASL code --- src/rdkafka_sasl_scram.c | 1 + 1 file changed, 1 insertion(+) diff --git a/src/rdkafka_sasl_scram.c b/src/rdkafka_sasl_scram.c index 968d8791..6d955452 100644 --- a/src/rdkafka_sasl_scram.c +++ b/src/rdkafka_sasl_scram.c @@ -602,6 +602,7 @@ rd_kafka_sasl_scram_handle_server_first_message (rd_kafka_transport_t *rktrans, "Invalid Base64 Salt in server-first-message"); rd_free(server_nonce); rd_free(salt_b64.ptr); + return -1; } rd_free(salt_b64.ptr); -- 2.42.0.windows.2