Bug 1050069 - 389-ds-base server reports crash in stan_GetCERTCertificate under the replication replay failure condition, r=wtc

1 files changed, 2 insertions, 0 deletions

diff --git a/lib/pki/tdcache.c b/lib/pki/tdcache.c
index 4d3ebbaab..bb55027ae 100644
--- a/lib/pki/tdcache.c
+++ b/lib/pki/tdcache.c
@@ -391,6 +391,7 @@ remove_token_certs(const void *k, void *v, void *a)
     nssPKIObject *object = &c->object;
     struct token_cert_dtor *dtor = a;
     PRUint32 i;
+    nssPKIObject_AddRef(object);
     nssPKIObject_Lock(object);
     for (i=0; i<object->numInstances; i++) {
 	if (object->instances[i]->token == dtor->token) {
@@ -409,6 +410,7 @@ remove_token_certs(const void *k, void *v, void *a)
 	}
     }
     nssPKIObject_Unlock(object);
+    nssPKIObject_Destroy(object);
     return;
 }