tree 0dba3b09b6c44a44b808ee3a12004d3468589ad8
parent de2dd6b1250579c46ff085d8dad760d6d5ca9407
author Willy Tarreau <w@1wt.eu> 1358990803 +0100
committer Willy Tarreau <w@1wt.eu> 1359040759 +0100

BUG/MEDIUM: uri_auth: missing NULL check and memory leak on memory shortage

A test is obviously wrong in uri_auth(). If strdup(pass) returns an error
while strdup(user) passes, the NULL pointer is still stored into the
structure. If the user returns the NULL instead, the allocated memory is
not released before returning the error.

The issue was present in 1.4 so the fix should be backported.

Reported-by: Dinko Korunic <dkorunic@reflected.net>