s4:dsdb/acl_read: keep the ldb_message of the sub search (bug #9470)

Some modules might not allocate values on the correct memory context.

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>

diff --git a/source4/dsdb/samdb/ldb_modules/acl_read.c b/source4/dsdb/samdb/ldb_modules/acl_read.c
index 92744f28ba7701cade4eb0f1110ab5a6e433d1c3..0b0f3636609ee711eccd3fe9b214c30be7f6c091 100644 (file)
--- a/source4/dsdb/samdb/ldb_modules/acl_read.c
+++ b/source4/dsdb/samdb/ldb_modules/acl_read.c
@@ -245,6 +245,11 @@ static int aclread_callback(struct ldb_request *req, struct ldb_reply *ares)
                                        k++;
                                }
                        }
+                       /*
+                        * This should not be needed, but some modules
+                        * may allocate values on the wrong context...
+                        */
+                       talloc_steal(ret_msg->elements, msg);
                } else {
                        ret_msg->elements = NULL;
                }