svn commit: samba r13606 - in branches/SAMBA_4_0/source: dsdb/samdb/ldb_modules ldap_server

[abartlet at samba.org]

Author: abartlet
Date: 2006-02-22 00:26:56 +0000 (Wed, 22 Feb 2006)
New Revision: 13606

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=13606

Log:
An attempt to fix #3525.

The problem was that the supportedControls were being stolen into the
result sent to the client, then talloc_free()ed.  This caused them to
be invalid on the next rootDSE query.

This also tries to avoid attaching the result to the long-term samdb
context, and avoids an extra loop in the result processing (pointed
out by tridge).

Andrew BARtlett

Modified:
   branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/rootdse.c
   branches/SAMBA_4_0/source/ldap_server/ldap_backend.c


Changeset:
Modified: branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/rootdse.c
===================================================================
--- branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/rootdse.c	2006-02-22 00:18:07 UTC (rev 13605)
+++ branches/SAMBA_4_0/source/dsdb/samdb/ldb_modules/rootdse.c	2006-02-22 00:26:56 UTC (rev 13606)
@@ -73,8 +73,12 @@
 	if (do_attribute(s->attrs, "supportedControl")) {
  		int i;
 		for (i = 0; i < priv->num_controls; i++) {
+			char *control = talloc_strdup(msg, priv->controls[i]);
+			if (!control) {
+				goto failed;
+			}
 			if (ldb_msg_add_string(msg, "supportedControl",
-						priv->controls[i]) != 0) {
+					       control) != 0) {
 				goto failed;
  			}
  		}

Modified: branches/SAMBA_4_0/source/ldap_server/ldap_backend.c
===================================================================
--- branches/SAMBA_4_0/source/ldap_server/ldap_backend.c	2006-02-22 00:18:07 UTC (rev 13605)
+++ branches/SAMBA_4_0/source/ldap_server/ldap_backend.c	2006-02-22 00:26:56 UTC (rev 13606)
@@ -153,7 +153,7 @@
 	struct ldap_Result *done;
 	struct ldapsrv_reply *ent_r, *done_r;
 	void *local_ctx;
-	struct ldb_context *samdb = call->conn->ldb;
+	struct ldb_context *samdb = talloc_get_type(call->conn->ldb, struct ldb_context);
 	struct ldb_dn *basedn;
 	struct ldb_result *res = NULL;
 	struct ldb_request lreq;
@@ -163,13 +163,13 @@
 	int success_limit = 1;
 	int result = LDAP_SUCCESS;
 	int ldb_ret;
-	int i, j, y;
+	int i, j;
 
 	DEBUG(10, ("SearchRequest"));
 	DEBUGADD(10, (" basedn: %s", req->basedn));
 	DEBUGADD(10, (" filter: %s\n", ldb_filter_from_tree(call, req->tree)));
 
-	local_ctx = talloc_named(call, 0, "sldb_Search local memory context");
+	local_ctx = talloc_new(call);
 	NT_STATUS_HAVE_NO_MEMORY(local_ctx);
 
 	basedn = ldb_dn_explode(local_ctx, req->basedn);
@@ -228,7 +228,8 @@
 
 	ldb_ret = ldb_request(samdb, &lreq);
 
-	res = talloc_steal(samdb, lreq.op.search.res);
+	/* Ensure we don't keep the search results around for too long */
+	res = talloc_steal(local_ctx, lreq.op.search.res);
 
 	if (ldb_ret == LDB_SUCCESS) {
 		for (i = 0; i < res->count; i++) {
@@ -253,14 +254,8 @@
 					continue;
 				}
 				ent->attributes[j].num_values = res->msgs[i]->elements[j].num_values;
-				ent->attributes[j].values = talloc_array(ent->attributes,
-								DATA_BLOB, ent->attributes[j].num_values);
-				NT_STATUS_HAVE_NO_MEMORY(ent->attributes[j].values);
-				for (y=0; y < ent->attributes[j].num_values; y++) {
-					ent->attributes[j].values[y].length = res->msgs[i]->elements[j].values[y].length;
-					ent->attributes[j].values[y].data = talloc_steal(ent->attributes[j].values,
-										res->msgs[i]->elements[j].values[y].data);
-				}
+				ent->attributes[j].values = res->msgs[i]->elements[j].values;
+				talloc_steal(ent->attributes, res->msgs[i]->elements[j].values);
 			}
 queue_reply:
 			ldapsrv_queue_reply(call, ent_r);
@@ -287,6 +282,7 @@
 		}
 		if (res->controls) {
 			done_r->msg->controls = (struct ldap_Control **)(res->controls);
+			talloc_steal(done_r, res->controls);
 		}
 	} else {
 		DEBUG(10,("SearchRequest: error\n"));