From f9bfeba0a021ea001abe3f1ff4680c08df7f258e Mon Sep 17 00:00:00 2001 From: Evan Hunt Date: Thu, 2 Oct 2014 23:24:53 -0700 Subject: [PATCH] [v9_9] fix SDB bug 3970. [contrib] Fixed a use after free bug in the SDB LDAP driver. [RT #37237] --- CHANGES | 3 +++ contrib/sdb/ldap/ldapdb.c | 1 - 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index b03dd5b999..6a405ce15a 100644 --- a/CHANGES +++ b/CHANGES @@ -1,3 +1,6 @@ +3970. [contrib] Fixed a use after free bug in the SDB LDAP driver. + [RT #37237] + 3968. [bug] Silence spurious log messages when using 'named -[46]'. [RT #37308] diff --git a/contrib/sdb/ldap/ldapdb.c b/contrib/sdb/ldap/ldapdb.c index caade37c80..c43342cd27 100644 --- a/contrib/sdb/ldap/ldapdb.c +++ b/contrib/sdb/ldap/ldapdb.c @@ -133,7 +133,6 @@ ldapdb_getconn(struct ldapdb_data *data) free(threaddata->index); while (threaddata->data != NULL) { conndata = threaddata->data; - free(conndata->index); if (conndata->data != NULL) ldap_unbind((LDAP *)conndata->data); threaddata->data = conndata->next;