Garbage collect the command argv, envp and info vectors since they are

not available at policy close time.

diff --git a/plugins/sudoers/policy.c b/plugins/sudoers/policy.c
index 2c26efb80f9fed57e6f11929da022362b74faeef..dbc70b09afc918a0149aaf9ba1e78decc7a11f97 100644 (file)
--- a/plugins/sudoers/policy.c
+++ b/plugins/sudoers/policy.c
@@ -724,7 +724,12 @@ sudoers_policy_exec_setup(char *argv[], char *envp[], mode_t cmnd_umask,
     }
 #endif /* HAVE_SELINUX */
 
-    /* Fill in exec environment info */
+    /* Free on exit; they are not available in the close function. */
+    sudoers_gc_add(GC_VECTOR, argv);
+    sudoers_gc_add(GC_VECTOR, envp);
+    sudoers_gc_add(GC_VECTOR, command_info);
+
+    /* Fill in exec environment info. */
     *(exec_args->argv) = argv;
     *(exec_args->envp) = envp;
     *(exec_args->info) = command_info;