From: Evan Hunt <each@isc.org>
Date: Fri, 3 Oct 2014 06:24:07 +0000 (-0700)
Subject: [master] fix SDB bug
X-Git-Tag: v9.11.0a1~1362
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=1c182f1516d3d14de6df81f4103ebfe538a519f6;p=thirdparty%2Fbind9.git

[master] fix SDB bug

3970.   [contrib]       Fixed a use after free bug in the SDB LDAP driver.
                        [RT #37237]
---

diff --git a/CHANGES b/CHANGES
index 963aab639a6..e7deb1f159c 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3970.   [contrib]       Fixed a use after free bug in the SDB LDAP driver.
+                        [RT #37237]
+
 3969.	[test]		Added 'delv' system test. [RT #36901]
 
 3968.	[bug]		Silence spurious log messages when using 'named -[46]'.
diff --git a/contrib/sdb/ldap/ldapdb.c b/contrib/sdb/ldap/ldapdb.c
index caade37c80e..c43342cd27d 100644
--- a/contrib/sdb/ldap/ldapdb.c
+++ b/contrib/sdb/ldap/ldapdb.c
@@ -133,7 +133,6 @@ ldapdb_getconn(struct ldapdb_data *data)
 			free(threaddata->index);
 			while (threaddata->data != NULL) {
 				conndata = threaddata->data;
-				free(conndata->index);
 				if (conndata->data != NULL)
 					ldap_unbind((LDAP *)conndata->data);
 				threaddata->data = conndata->next;