[Ipsec-tools-devel] GSSAPI and mem problems...

[VANHULLEBUS Y. <va...@fr...>]

Hi.

While working on conf reload, I may have found a bug/mem
leak/something else in the GSSAPI code.

As I don't really know this part of the code, and as I'm still trying
to understand exactly the mechanisms of some parts of the code, I'm
not sure, so here is what I found:

In ipsec_doi.c, get_ph1approval(), in the #ifdef HAVE_GSSAPI part,
iph1->approval may be a reference to one of the iph1->proposal (which
is the default action where no GSSAPI, and which can lead to some
problem, for example in the anonymous entry, afaik, because proposal
entries contains references to some parts of the rmconf...).


If someone makes some changes to code related to that, please contact
me before, as it is likely to generate some interactions with conf
reload !



Yvan.