commit d5995eec7e5fd487b57b8805095ffbc74796411a
Author: Jeremy Allison <jra@samba.org>
Date:   Wed Jan 6 13:11:00 2010 -0800

    Second part of the fix for bug #7020 - smbd using 2G memory.
    
    There was a second leak in the processing of the out_data.frag
    prs_struct. It needs freeing once the current pdu has been returned
    asynchronously.
    
    Jeremy.

Index: source3/rpc_server/srv_pipe_hnd.c
===================================================================
--- source3/rpc_server/srv_pipe_hnd.c.orig
+++ source3/rpc_server/srv_pipe_hnd.c
@@ -890,6 +890,13 @@ static ssize_t read_from_internal_pipe(s
   out:
 	(*is_data_outstanding) = prs_offset(&p->out_data.frag) > n;
 
+	if (p->out_data.current_pdu_sent == prs_offset(&p->out_data.frag)) {
+		/* We've returned everything in the out_data.frag
+		 * so we're done with this pdu. Free it and reset
+		 * current_pdu_sent. */
+		p->out_data.current_pdu_sent = 0;
+		prs_mem_free(&p->out_data.frag);
+	}
 	return data_returned;
 }
 
