]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ada5d09) | patch
BUG/MEDIUM: connection: properly unregister the mux on failed initialization
authorWilly Tarreau <w@1wt.eu>
Thu, 10 Jan 2019 09:33:32 +0000 (10:33 +0100)
committerWilly Tarreau <w@1wt.eu>
Thu, 10 Jan 2019 18:47:43 +0000 (19:47 +0100)
commit762475e1f957936144e48c51a6befdef3f5fe1db
tree8dc486ee624853a6ec0c20a94a3a7b3d49ec6a4ctree
parentada5d091424a18208525ece0f590092c25bbde0ccommit | diff
BUG/MEDIUM: connection: properly unregister the mux on failed initialization

When mux->init() fails, session_free() will call it again to unregister
it while it was already done, resulting in null derefs or use-after-free.
This typically happens on out-of-memory conditions during H1 or H2 connection
or stream allocation.

This fix must be backported to 1.9.
include/proto/connection.h diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git