From 389169e975990a4e07b8fd948aaac4b13d7897e8 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Mon, 18 Jan 2010 20:06:30 +0100
Subject: Fix a double free bug

---
 server/responder/pam/pamsrv_cmd.c | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/server/responder/pam/pamsrv_cmd.c b/server/responder/pam/pamsrv_cmd.c
index 69cbf55d8..d1d35b2d2 100644
--- a/server/responder/pam/pamsrv_cmd.c
+++ b/server/responder/pam/pamsrv_cmd.c
@@ -647,7 +647,6 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
     if (blen >= sizeof(uint32_t) &&
         ((uint32_t *)(&body[blen - sizeof(uint32_t)]))[0] != END_OF_PAM_REQUEST) {
         DEBUG(1, ("Received data not terminated.\n"));
-        talloc_free(preq);
         ret = EINVAL;
         goto done;
     }
@@ -671,7 +670,6 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
             ret = EINVAL;
     }
     if (ret != EOK) {
-        talloc_free(preq);
         ret = EINVAL;
         goto done;
     }
@@ -682,7 +680,6 @@ static int pam_forwarder(struct cli_ctx *cctx, int pam_cmd)
             if (strcasecmp(dom->name, pd->domain) == 0) break;
         }
         if (!dom) {
-            talloc_free(preq);
             ret = ENOENT;
             goto done;
         }
-- 
cgit