]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: quic: Possible crashes during secrets allocations (heavy load)
authorFrédéric Lécaille <flecaille@haproxy.com>
Wed, 8 Nov 2023 14:59:00 +0000 (15:59 +0100)
committerFrédéric Lécaille <flecaille@haproxy.com>
Thu, 9 Nov 2023 09:32:31 +0000 (10:32 +0100)
commit0016dbaef40e734aef520817ee930e67c3fa784f
tree60c8fbccf1c0edded4f3153b30b6ab2c1cf33cbf
parent819690303de91804e009dea31d1c4c9116666396
BUG/MEDIUM: quic: Possible crashes during secrets allocations (heavy load)

This bug could be reproduced with -dMfail option and detected by libasan.
During the TLS secrets allocations, when failed, quic_tls_ctx_secs_free()
is called. It resets the already initialized secrets. Some were detected
as initialized when not, or with a non initialized length, which leads
to big "memset(0)" detected by libsasan.

Ensure that all the secrets are really initialized with correct lengths.

No need to be backported.
include/haproxy/quic_tls.h