From c4ef3dbf738febc595e5b201caaaa8d452bfffe0 Mon Sep 17 00:00:00 2001
From: Andreas Schneider <asn@samba.org>
Date: Tue, 26 Jul 2022 11:31:54 +0200
Subject: [PATCH] s4:dsdb: Burn the memory of hashes returned by
 samdb_result_hashes()

Signed-off-by: Andreas Schneider <asn@samba.org>
Reviewed-by: Stefan Metzmacher <metze@samba.org>
---
 source4/dsdb/common/util.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c
index a7a93a9a066..112917544a3 100644
--- a/source4/dsdb/common/util.c
+++ b/source4/dsdb/common/util.c
@@ -508,6 +508,7 @@ unsigned int samdb_result_hashes(TALLOC_CTX *mem_ctx, const struct ldb_message *
 	if (! *hashes) {
 		return 0;
 	}
+	talloc_keep_secret(*hashes);
 
 	for (i=0;i<count;i++) {
 		memcpy((*hashes)[i].hash, (i*16)+(char *)val->data, 16);
-- 
2.47.3