]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.
authorEmeric Brun <ebrun@haproxy.com>
Wed, 10 Oct 2018 12:51:02 +0000 (14:51 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 10 Oct 2018 16:05:33 +0000 (18:05 +0200)
commit7ad43e7928c9a61b40332e4d5e9a7ccc33e6b65b
tree3cfbb621ce1659e7adb7483b207e0c5ec9d8c2cf
parent0b25d5e99fa0442302eae1b9bd43e28cda5516a1
BUG/MEDIUM: Cur/CumSslConns counters not threadsafe.

CurSslConns inc/dec operations are not threadsafe. The unsigned CurSslConns
counter can wrap to a negative value. So we could notice connection rejects
because of MaxSslConns limit artificially exceeded.

CumSslConns inc operation are also not threadsafe so we could miss
some connections and show inconsistenties values compared to CumConns.

This fix should be backported to v1.8.
src/ssl_sock.c