Andrew Geissler | 615f2f1 | 2022-07-15 14:00:58 -0500 | [diff] [blame^] | 1 | From 078f98ea154475d953ce5b7cd851732f4dc270a7 Mon Sep 17 00:00:00 2001 |
| 2 | From: Hitendra Prajapati <hprajapati@mvista.com> |
| 3 | Date: Tue, 5 Jul 2022 09:31:07 +0530 |
| 4 | Subject: [PATCH] CVE-2022-24407 |
| 5 | |
| 6 | Upstream-Status: Backport [https://github.com/cyrusimap/cyrus-sasl/commit/9eff746c9daecbcc0041b09a5a51ba30738cdcbc] |
| 7 | CVE: CVE-2022-24407 |
| 8 | Signed-off-by: Hitendra Prajapati <hprajapati@mvista.com> |
| 9 | --- |
| 10 | plugins/sql.c | 1 + |
| 11 | 1 file changed, 1 insertion(+) |
| 12 | |
| 13 | diff --git a/plugins/sql.c b/plugins/sql.c |
| 14 | index 6ac81c2f..d90dbac9 100644 |
| 15 | --- a/plugins/sql.c |
| 16 | +++ b/plugins/sql.c |
| 17 | @@ -1127,6 +1127,7 @@ static int sql_auxprop_lookup(void *glob_context, |
| 18 | done: |
| 19 | if (escap_userid) sparams->utils->free(escap_userid); |
| 20 | if (escap_realm) sparams->utils->free(escap_realm); |
| 21 | + if (escap_passwd) sparams->utils->free(escap_passwd); |
| 22 | if (conn) settings->sql_engine->sql_close(conn); |
| 23 | if (userid) sparams->utils->free(userid); |
| 24 | if (realm) sparams->utils->free(realm); |
| 25 | -- |
| 26 | 2.25.1 |
| 27 | |