From: Tom Lane <tgl@sss.pgh.pa.us>
Date: Wed, 7 Feb 2001 23:42:27 +0000 (+0000)
Subject: Back-patch password leak fix for Vaschenko.
X-Git-Url: http://git.postgresql.org/gitweb/stat%3Cscript%20data-cfasync=?a=commitdiff_plain;h=refs%2Fheads%2FREL7_0_PATCHES;p=users%2Fbernd%2Fpostgres.git

Back-patch password leak fix for Vaschenko.
---

diff --git a/src/backend/libpq/crypt.c b/src/backend/libpq/crypt.c
index c52f2608ac..4b33fcef2d 100644
--- a/src/backend/libpq/crypt.c
+++ b/src/backend/libpq/crypt.c
@@ -59,6 +59,7 @@ crypt_getpwdreloadfilename()
 	bufsize = strlen(pwdfilename) + strlen(CRYPT_PWD_RELOAD_SUFX) + 1;
 	rpfnam = (char *) palloc(bufsize);
 	snprintf(rpfnam, bufsize, "%s%s", pwdfilename, CRYPT_PWD_RELOAD_SUFX);
+	pfree(pwdfilename);
 
 	return rpfnam;
 }
@@ -79,6 +80,8 @@ crypt_openpwdfile()
 	pwdfile = AllocateFile(filename, "rb");
 #endif
 
+	pfree(filename);
+
 	return pwdfile;
 }
 
@@ -131,6 +134,7 @@ crypt_loadpwdfile()
 
 	filename = crypt_getpwdreloadfilename();
 	result = unlink(filename);
+	pfree(filename);
 
 	/*
 	 * We want to delete the flag file before reading the contents of the