s3:auth: add comment to nulling out stolen sampass

[ira/wip.git] / source3 / auth / auth_sam.c

diff --git a/source3/auth/auth_sam.c b/source3/auth/auth_sam.c
index 834ca977dac581f0e1d7cfc9df7cc8462a5b6549..1dd8fc950ea60a86526fa24efaec542ee510e6af 100644 (file)
--- a/source3/auth/auth_sam.c
+++ b/source3/auth/auth_sam.c
@@ -486,6 +486,10 @@ static NTSTATUS check_sam_security(const struct auth_context *auth_context,
        become_root();
        nt_status = make_server_info_sam(server_info, sampass);
        unbecome_root();
+       /*
+        * sampass has been stolen to server_info.
+        * So NULL it out to prevent segfaults.
+        */
        sampass = NULL;
 
        if (!NT_STATUS_IS_OK(nt_status)) {