r21312: merge from SAMBA_4_0:

fix memory hierachy, and access to already freed memory

metze

diff --git a/source/lib/ldb/ldb_tdb/ldb_index.c b/source/lib/ldb/ldb_tdb/ldb_index.c
index 2c88d7e19db748ba0d0b27c5869e046c7ca7c158..672bc1f62593acd2a3e9fc54510f87f5d1fab433 100644 (file)
--- a/source/lib/ldb/ldb_tdb/ldb_index.c
+++ b/source/lib/ldb/ldb_tdb/ldb_index.c
@@ -337,7 +337,7 @@ static int ltdb_index_dn_leaf(struct ldb_module *module,
                        ldb_oom(module->ldb);
                        return -1;
                }
-               list->dn[0] = talloc_strdup(list, (char *)tree->u.equality.value.data);
+               list->dn[0] = talloc_strdup(list->dn, (char *)tree->u.equality.value.data);
                if (list->dn[0] == NULL) {
                        ldb_oom(module->ldb);
                        return -1;