BUG/MEDIUM: mux-h2: erase h2c->wait_event.tasklet on error path

On the allocation error path in h2_init() we may check if
h2c->wait_event.tasklet needs to be released but it has not yet been
zeroed. Let's do this before jumping to the freeing location.

This needs to be backported to all maintained versions.

diff --git a/src/mux_h2.c b/src/mux_h2.c
index 1d4dd3a756e3c07efb7f5d0b7451dbc4268509f0..869779968ecdadcc78ac5f297638eafb63558f52 100644 (file)
--- a/src/mux_h2.c
+++ b/src/mux_h2.c
@@ -962,6 +962,7 @@ static int h2_init(struct connection *conn, struct proxy *prx, struct session *s
 
        h2c->proxy = prx;
        h2c->task = NULL;
+       h2c->wait_event.tasklet = NULL;
        h2c->idle_start = now_ms;
        if (tick_isset(h2c->timeout)) {
                t = task_new_here();