xauth: Changes to 'master'

[GitLab Mirror]

 configure.ac |    2 +-
 process.c    |   59 ++++++++++++++++++++++++++++++++++++++++++++---------------
 2 files changed, 45 insertions(+), 16 deletions(-)

New commits:
commit aaf037ec5c576e46318935feaf6e2b7407ff11a0
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Sun May 10 13:21:50 2020 -0700

    Avoid memory leaks in error paths in do_generate
    
    Reported by Oracle Parfait:
    Error: Memory leak
       Memory leak [memory-leak] (CWE 401):
          Memory leak of pointer authdata allocated with malloc((authdatalen - 1))
            at line 1955 of process.c in function 'do_generate'.
              authdata allocated at line 1946 with malloc((authdatalen - 1))
          Memory leak of pointer authdata allocated with malloc((authdatalen - 1))
            at line 1971 of process.c in function 'do_generate'.
              authdata allocated at line 1946 with malloc((authdatalen - 1))
              authdata leaks when (i + 1) >= argc at line 1910.
            at line 1980 of process.c in function 'do_generate'.
              authdata allocated at line 1946 with malloc((authdatalen - 1))
              authdata leaks when (i + 1) >= argc at line 1910.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>

commit 4faf0f63f0563513252967a2da1c51de6f5f7b0c
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Sun May 10 11:46:16 2020 -0700

    Use reallocarray() when adding members to array in split_into_words()
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>

commit af7a74e28b33c18c4cb90f0d25bdfd5dff2e29d3
Author: Alan Coopersmith <alan.coopersmith at oracle.com>
Date:   Sun May 10 11:27:25 2020 -0700

    Avoid memory leak when realloc() fails in split_into_words()
    
    Reported by Oracle Parfait:
    Error: Memory leak
       Memory leak [memory-leak] (CWE 401):
          Memory leak of pointer argv allocated with malloc(32)
            at line 283 of process.c in function 'split_into_words'.
              argv allocated at line 264 with malloc(32)
              argv leaks when cur == total at line 280.
    
    Signed-off-by: Alan Coopersmith <alan.coopersmith at oracle.com>