s4:dsdb: Mark hash returned by samdb_result_hash() as secret

Signed-off-by: Jo Sutton <josutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/source4/dsdb/common/util.c b/source4/dsdb/common/util.c
index b2d6cc6ea39e1999ca2320992a2c798be2b4a809..e6e18b15eef04c8113d30adb726de40f9e87dcfd 100644 (file)
--- a/source4/dsdb/common/util.c
+++ b/source4/dsdb/common/util.c
@@ -539,6 +539,7 @@ struct samr_Password *samdb_result_hash(TALLOC_CTX *mem_ctx, const struct ldb_me
                if (hash == NULL) {
                        return NULL;
                }
+               talloc_keep_secret(hash);
                memcpy(hash->hash, val->data, MIN(val->length, sizeof(hash->hash)));
        }
        return hash;