From: Michal Srb <michalsrb@gmail.com>
Date: Wed, 29 Mar 2017 13:23:18 +0000 (+0300)
Subject: Delete underlying ssecurity in SSecurityVeNCrypt.
X-Git-Tag: v1.7.90~6
X-Git-Url: https://source.dussan.org/?a=commitdiff_plain;h=8f3e8663b3cf57c0b62d939d6953fbfcc112aadd;p=tigervnc.git

Delete underlying ssecurity in SSecurityVeNCrypt.

Otherwise it gets leaked which would allow even not authenticated clients to exhaust server memory.
---

diff --git a/common/rfb/SSecurityVeNCrypt.cxx b/common/rfb/SSecurityVeNCrypt.cxx
index 7c137498..ce6c71ba 100644
--- a/common/rfb/SSecurityVeNCrypt.cxx
+++ b/common/rfb/SSecurityVeNCrypt.cxx
@@ -55,6 +55,8 @@ SSecurityVeNCrypt::SSecurityVeNCrypt(SecurityServer *sec) : security(sec)
 
 SSecurityVeNCrypt::~SSecurityVeNCrypt()
 {
+  delete ssecurity;
+
   if (subTypes) {
     delete [] subTypes;
     subTypes = NULL;