[SERF-153] CredHandle not freed when APR pool is destroyed

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: serf-1.3.9
• Labels: Priority-Medium Type-Defect
• Assignee: Unassigned
• Reporter: Michael Osipov
• Created: 20/Aug/14 17:13
• Updated: 12/Aug/22 08:32
• Resolved: 12/Aug/22 08:32

Description

In auth_spnego_sspi.c from line 97

if (SecIsValidHandle(&ctx->sspi_credentials))

{ FreeCredentialsHandle(&ctx->sspi_context); SecInvalidateHandle(&ctx->sspi_context); }

I guess this should read

if (SecIsValidHandle(&ctx->sspi_credentials))

{ FreeCredentialsHandle(&ctx->sspi_credentials); SecInvalidateHandle(&ctx->sspi_credentials); }

Shouldn't it?