BUG/MAJOR: http: Fix possible infinity loop in http_sync_(req|res)_state

In commit "MINOR: http: Switch requests/responses in TUNNEL mode only by
checking txn flags", it is possible to have an infinite loop on HTTP_MSG_CLOSING
state.

diff --git a/src/proto_http.c b/src/proto_http.c
index f9dc8a1b44488c9cb5479854359164c4e319cc81..e72e7e9620ed677f61cd1a252980d0b93e40b173 100644 (file)
--- a/src/proto_http.c
+++ b/src/proto_http.c
@@ -5413,8 +5413,8 @@ int http_sync_req_state(struct stream *s)
                else if (chn->flags & CF_SHUTW) {
                        txn->req.err_state = txn->req.msg_state;
                        txn->req.msg_state = HTTP_MSG_ERROR;
-                       goto wait_other_side;
                }
+               goto wait_other_side;
        }
 
        if (txn->req.msg_state == HTTP_MSG_CLOSED) {
@@ -5542,8 +5542,8 @@ int http_sync_res_state(struct stream *s)
                        s->be->be_counters.cli_aborts++;
                        if (objt_server(s->target))
                                objt_server(s->target)->counters.cli_aborts++;
-                       goto wait_other_side;
                }
+               goto wait_other_side;
        }
 
        if (txn->rsp.msg_state == HTTP_MSG_CLOSED) {