From 0beede33a7034d63912bed301e3e7340f8d2ea86 Mon Sep 17 00:00:00 2001
From: Stefan Metzmacher <metze@samba.org>
Date: Thu, 24 May 2012 11:57:02 +0200
Subject: [PATCH] s4:smb_server/smb: fix talloc_free() bug

ERROR: talloc_free with references at ../source4/smb_server/smb/receive.c:637
        reference at ../source4/ntvfs/posix/pvfs_wait.c:86

metze
---
 source4/smb_server/smb/receive.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/source4/smb_server/smb/receive.c b/source4/smb_server/smb/receive.c
index b100757b551..34438349018 100644
--- a/source4/smb_server/smb/receive.c
+++ b/source4/smb_server/smb/receive.c
@@ -634,7 +634,7 @@ void smbsrv_chain_reply(struct smbsrv_request *req)
 
 	/* cleanup somestuff for the next request */
 	DLIST_REMOVE(req->smb_conn->requests, req);
-	talloc_free(req->ntvfs);
+	talloc_unlink(req, req->ntvfs);
 	req->ntvfs = NULL;
 	talloc_free(req->io_ptr);
 	req->io_ptr = NULL;
-- 
2.11.4.GIT