From 257aac72e1147b6c255a71b7d7653de9e01b690d Mon Sep 17 00:00:00 2001 From: Sam Hartman Date: Wed, 3 Sep 2014 09:51:51 -0400 Subject: [PATCH] Don't use output_token after free --- mod_auth_gssweb.c | 1 + 1 file changed, 1 insertion(+) diff --git a/mod_auth_gssweb.c b/mod_auth_gssweb.c index df0c11a..8f132fe 100644 --- a/mod_auth_gssweb.c +++ b/mod_auth_gssweb.c @@ -466,6 +466,7 @@ gssweb_authenticate_user(request_rec *r) /* Store the nonce & ouput token in the stored context */ conn_ctx->nonce = nonce; conn_ctx->output_token = output_token; + output_token.length = 0; /* If we aren't done yet, go around again */ if (major_status & GSS_S_CONTINUE_NEEDED) { -- 2.1.4