swrap: Fix use-after-free

This was introduced by commit 9ce583b6cd6f55d473e5b54794fb06450997ebc8

Signed-off-by: Anoop C S <anoopcs@redhat.com>
Reviewed-by: Michael Adam <obnox@samba.org>
Reviewed-by: Andreas Schneider <asn@samba.org>

diff --git a/src/socket_wrapper.c b/src/socket_wrapper.c
index d40f8b611e94385ca18a2b49675221c9b3a4fb93..ece5a101fe4e0bc4022f3298a70cf79dc71d31fb 100644 (file)
--- a/src/socket_wrapper.c
+++ b/src/socket_wrapper.c
@@ -1733,7 +1733,7 @@ static void swrap_remove_stale(int fd)
        SWRAP_DLIST_REMOVE(socket_fds, fi);
        free(fi);
 
-       si = &sockets[fi->si_index];
+       si = &sockets[si_index];
        si->refcount--;
 
        if (si->refcount > 0) {