From 6b5fd2543d6ca2408e162bb36a3423b422606845 Mon Sep 17 00:00:00 2001
From: Tom Yu <tlyu@mit.edu>
Date: Sat, 15 Dec 2007 01:22:32 +0000
Subject: [PATCH] pull up r20178 from trunk

 r20178@cathode-dark-space:  tlyu | 2007-12-13 23:38:28 -0500
 ticket: 5856
 tags: pullup
 target_version: 1.6.4

 fix CVE-2007-5971: free of non-heap pointer in gss_indicate_mechs()


ticket: 5854
version_fixed: 1.6.4

git-svn-id: svn://anonsvn.mit.edu/krb5/branches/krb5-1-6@20184 dc483132-0cff-0310-8789-dd5450dbe970
---
 src/lib/gssapi/mechglue/g_initialize.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/lib/gssapi/mechglue/g_initialize.c b/src/lib/gssapi/mechglue/g_initialize.c
index 0c4513cac..b4a668a55 100644
--- a/src/lib/gssapi/mechglue/g_initialize.c
+++ b/src/lib/gssapi/mechglue/g_initialize.c
@@ -208,7 +208,7 @@ gss_OID_set *mechSet;
 				free((*mechSet)->elements[j].elements);
 			}
 			free((*mechSet)->elements);
-			free(mechSet);
+			free(*mechSet);
 			*mechSet = NULL;
 			return (GSS_S_FAILURE);
 		}
-- 
2.26.2