From 0e1bcf77bd73baa0fea64830eb1f4f65a63c7afe Mon Sep 17 00:00:00 2001 From: Sumit Bose Date: Thu, 8 Oct 2020 12:18:41 +0200 Subject: [PATCH 5/8] negcache: make sure domain config does not leak into global Resolves: https://github.com/SSSD/sssd/issues/5238 Reviewed-by: Alexey Tikhonov --- src/responder/common/negcache.c | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/responder/common/negcache.c b/src/responder/common/negcache.c index ce1c0ab8c..139218420 100644 --- a/src/responder/common/negcache.c +++ b/src/responder/common/negcache.c @@ -1050,6 +1050,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache, } } + talloc_zfree(filter_list); /* Populate non domain-specific negative cache user entries */ ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY, CONFDB_NSS_FILTER_USERS, &filter_list); @@ -1185,6 +1186,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache, } } + talloc_zfree(filter_list); /* Populate non domain-specific negative cache group entries */ ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY, CONFDB_NSS_FILTER_GROUPS, &filter_list); -- 2.21.3