From: Marc-André Moreau <marcandre.moreau@gmail.com>
Date: Wed, 29 Feb 2012 20:33:49 +0000 (-0500)
Subject: libfreerdp-auth: workaround for double free in CredSSP
X-Git-Tag: 1.1.0-beta1~416
X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=1c143c96fce9912dbefbce191418c48f6f41de5b;p=platform%2Fupstream%2Ffreerdp.git

libfreerdp-auth: workaround for double free in CredSSP
---

diff --git a/libfreerdp-auth/credssp.c b/libfreerdp-auth/credssp.c
index 7dcc209..d0c0cc4 100644
--- a/libfreerdp-auth/credssp.c
+++ b/libfreerdp-auth/credssp.c
@@ -388,7 +388,7 @@ int credssp_client_authenticate(rdpCredssp* credssp)
 
 	/* Free resources */
 
-	sspi_SecBufferFree(&credssp->negoToken);
+	//sspi_SecBufferFree(&credssp->negoToken);
 	sspi_SecBufferFree(&credssp->authInfo);
 
 	FreeCredentialsHandle(&credentials);
diff --git a/libfreerdp-auth/sspi.c b/libfreerdp-auth/sspi.c
index 0e3019d..7fb53db 100644
--- a/libfreerdp-auth/sspi.c
+++ b/libfreerdp-auth/sspi.c
@@ -195,6 +195,7 @@ void sspi_SecBufferFree(SEC_BUFFER* sec_buffer)
 {
 	sec_buffer->cbBuffer = 0;
 	xfree(sec_buffer->pvBuffer);
+	sec_buffer->pvBuffer = NULL;
 }
 
 SEC_HANDLE* sspi_SecureHandleAlloc()