Memory leak on ngx_http_auth_pam_module

Sergio Talens-Oliag sto at iti.upv.es
Tue Nov 16 16:58:41 MSK 2010


This weekend Neil Chintomby <nchintomby at gmail.com> reported me a bug on the
ngx_http_auth_pam_module; the problem was that the current code was not
calling pam_end() when there was an authentication failure, returning without
freeing the memory allocated by the pam transaction operations.

The updated code is available on:

  http://web.iti.upv.es/~sto/nginx/ngx_http_auth_pam_module-1.2.tar.gz

Users of the module should upgrade if they want to avoid the memory leak.

  Sergio.

-- 
Sergio Talens-Oliag <sto at iti.upv.es>       <http://www.iti.upv.es/>
Key fingerprint = FF77 A16B 9D09 FC7B 6656 CFAD 261D E19A 578A 36F2



More information about the nginx mailing list