From 96bdcbb4441ddf05c065bbafa88e5691300424d1 Mon Sep 17 00:00:00 2001
From: Sumit Bose <sbose@redhat.com>
Date: Thu, 8 Oct 2020 12:18:41 +0200
Subject: [PATCH 50/53] negcache: make sure domain config does not leak into
 global

Resolves: https://github.com/SSSD/sssd/issues/5238

Reviewed-by: Alexey Tikhonov <atikhono@redhat.com>
(cherry picked from commit 0e1bcf77bd73baa0fea64830eb1f4f65a63c7afe)
---
 src/responder/common/negcache.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/responder/common/negcache.c b/src/responder/common/negcache.c
index d9bf1417e..b9586f315 100644
--- a/src/responder/common/negcache.c
+++ b/src/responder/common/negcache.c
@@ -1048,6 +1048,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache,
         }
     }
 
+    talloc_zfree(filter_list);
     /* Populate non domain-specific negative cache user entries */
     ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY,
                                     CONFDB_NSS_FILTER_USERS, &filter_list);
@@ -1183,6 +1184,7 @@ errno_t sss_ncache_prepopulate(struct sss_nc_ctx *ncache,
         }
     }
 
+    talloc_zfree(filter_list);
     /* Populate non domain-specific negative cache group entries */
     ret = confdb_get_string_as_list(cdb, tmpctx, CONFDB_NSS_CONF_ENTRY,
                                     CONFDB_NSS_FILTER_GROUPS, &filter_list);
-- 
2.21.3