Merge pull request #202 from lioyerar/fix_coredump_db

libtac: fix double free in tac_acct_read_timeout
kravietz · Oct 12, 2023 · b89dba4 · b89dba4
2 parents 4284d90 + a6c2742
commit b89dba4
Showing 1 changed file with 1 addition and 2 deletions.
diff --git a/libtac/lib/acct_r.c b/libtac/lib/acct_r.c
@@ -139,8 +139,7 @@ int tac_acct_read_timeout(int fd, struct areply *re, unsigned long timeout)
         msg = (char *)xcalloc(1, tb->msg_len + 1);
         memcpy(msg, (unsigned char *)tb + TAC_ACCT_REPLY_FIXED_FIELDS_SIZE, tb->msg_len);
         msg[(int)tb->msg_len] = '\0';
-        re->msg = msg;
-        free(msg);
+        re->msg = msg; /* Freed by caller */
     }
 
     /* server logged our request successfully */