- dugsong@cvs.openbsd.org 2002/03/18 01:30:10

     [auth-krb4.c]
     set client to NULL after xfree(), from Rolf Braun
     <rbraun+ssh@andrew.cmu.edu>

2 files changed, 7 insertions, 2 deletions

diff --git a/ChangeLog b/ChangeLog
index 0419a17c7..e382cda76 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -37,6 +37,10 @@
      [auth.h auth1.c auth2.c sshd.c]
      have the authentication functions return the authentication context
      and then do_authenticated; okay millert@
+   - dugsong@cvs.openbsd.org 2002/03/18 01:30:10
+     [auth-krb4.c]
+     set client to NULL after xfree(), from Rolf Braun 
+     <rbraun+ssh@andrew.cmu.edu>
 
 20020317
  - (tim) [configure.ac] Assume path given with --with-pid-dir=PATH is wanted,
@@ -7883,4 +7887,4 @@
  - Wrote replacements for strlcpy and mkdtemp
  - Released 1.0pre1
 
-$Id: ChangeLog,v 1.1935 2002/03/22 01:27:35 mouring Exp $
+$Id: ChangeLog,v 1.1936 2002/03/22 01:30:40 mouring Exp $
diff --git a/auth-krb4.c b/auth-krb4.c
index f7a144f9d..2a3cf5314 100644
--- a/auth-krb4.c
+++ b/auth-krb4.c
@@ -23,7 +23,7 @@
  */
 
 #include "includes.h"
-RCSID("$OpenBSD: auth-krb4.c,v 1.25 2001/12/19 07:18:56 deraadt Exp $");
+RCSID("$OpenBSD: auth-krb4.c,v 1.26 2002/03/18 01:30:10 dugsong Exp $");
 
 #include "ssh.h"
 #include "ssh1.h"
@@ -253,6 +253,7 @@ auth_krb4(Authctxt *authctxt, KTEXT auth, char **client)
                 log("Kerberos v4 .klogin authorization failed for %s to "
                     "account %s", *client, authctxt->user);
                 xfree(*client);
+                *client = NULL;
                 return (0);
         }
         /* Increment the checksum, and return it encrypted with the