* send_tgs.c (krb5_send_tgs): Fix memory allocation size when padata is

provided.

ticket: 3714

git-svn-id: svn://anonsvn.mit.edu/krb5/trunk@17988 dc483132-0cff-0310-8789-dd5450dbe970

diff --git a/src/lib/krb5/krb/send_tgs.c b/src/lib/krb5/krb/send_tgs.c
index 8fc60212cedc8f5be8c981f96c39d65b50e9c061..aa881e16f0c6980066c2b432d31aa7520dcb007d 100644 (file)
--- a/src/lib/krb5/krb/send_tgs.c
+++ b/src/lib/krb5/krb/send_tgs.c
@@ -228,7 +228,7 @@ krb5_send_tgs(krb5_context context, krb5_flags kdcoptions,
        krb5_pa_data * const * counter;
        register unsigned int i = 0;
        for (counter = padata; *counter; counter++, i++);
-       combined_padata = (krb5_pa_data **)malloc(i+2);
+       combined_padata = malloc((i+2) * sizeof(*combined_padata));
        if (!combined_padata) {
            krb5_xfree(ap_req_padata.contents);
            retval = ENOMEM;