librdkafka/0001-Missing-return-on-error-causes-use-after-free-in-SAS.patch
lb1107039128 d0cbd090db Missing return on error causes use-after-free in SASL code
Signed-off-by: lb1107039128 <liubo1@xfusion.com>
2023-12-27 11:23:32 +08:00

25 lines
814 B
Diff

From 0c3840e614e49090785ae8b33ff00c59d354c188 Mon Sep 17 00:00:00 2001
From: Huzaifa Sidhpurwala <huzaifas@redhat.com>
Date: Wed, 16 May 2018 09:16:19 +0530
Subject: [PATCH] Missing return on error causes use-after-free in SASL code
---
src/rdkafka_sasl_scram.c | 1 +
1 file changed, 1 insertion(+)
diff --git a/src/rdkafka_sasl_scram.c b/src/rdkafka_sasl_scram.c
index 968d8791..6d955452 100644
--- a/src/rdkafka_sasl_scram.c
+++ b/src/rdkafka_sasl_scram.c
@@ -602,6 +602,7 @@ rd_kafka_sasl_scram_handle_server_first_message (rd_kafka_transport_t *rktrans,
"Invalid Base64 Salt in server-first-message");
rd_free(server_nonce);
rd_free(salt_b64.ptr);
+ return -1;
}
rd_free(salt_b64.ptr);
--
2.42.0.windows.2