search

kravietz / pam_tacplus

TACACS+ protocol client library and PAM module in C. This PAM module support authentication, authorization (account management) and accounting (session management)performed using TACACS+ protocol designed by Cisco.
GNU Lesser General Public License v3.0
130 stars 97 forks source link

libtac: fix double free in tac_acct_read_timeout #202

Closed lsang6WIND closed 9 months ago

lsang6WIND commented 9 months ago

Core dumped due: "free(): double free detected in tcache 2"

re->msg should be freed by the caller as in comment 6380c5a81ea6, else it will create a dangling pointer.

Fixes: 6380c5a81ea6 ("Replace deprecated bcopy() by memcpy()")

Fix #201