From 0d276a41f1569aebdf2177f0ee47ad107d1ea209 Mon Sep 17 00:00:00 2001
From: Evan Hunt <each@isc.org>
Date: Thu, 2 Oct 2014 23:24:29 -0700
Subject: [PATCH] [v9_10] fix SDB bug

3970.   [contrib]       Fixed a use after free bug in the SDB LDAP driver.
                        [RT #37237]
---
 CHANGES                   | 3 +++
 contrib/sdb/ldap/ldapdb.c | 1 -
 2 files changed, 3 insertions(+), 1 deletion(-)

diff --git a/CHANGES b/CHANGES
index f8b25530fc..76cd286236 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+3970.   [contrib]       Fixed a use after free bug in the SDB LDAP driver.
+                        [RT #37237]
+
 3969.	[test]		Added 'delv' system test. [RT #36901]
 
 3968.	[bug]		Silence spurious log messages when using 'named -[46]'.
diff --git a/contrib/sdb/ldap/ldapdb.c b/contrib/sdb/ldap/ldapdb.c
index caade37c80..c43342cd27 100644
--- a/contrib/sdb/ldap/ldapdb.c
+++ b/contrib/sdb/ldap/ldapdb.c
@@ -133,7 +133,6 @@ ldapdb_getconn(struct ldapdb_data *data)
 			free(threaddata->index);
 			while (threaddata->data != NULL) {
 				conndata = threaddata->data;
-				free(conndata->index);
 				if (conndata->data != NULL)
 					ldap_unbind((LDAP *)conndata->data);
 				threaddata->data = conndata->next;