From: Christopher Faulet <cfaulet@haproxy.com>
Date: Wed, 18 Nov 2020 15:44:02 +0000 (+0100)
Subject: BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages
X-Git-Tag: v2.4-dev1~20
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=aab1b67383993b93bd70144825bc4350e3986a10;p=thirdparty%2Fhaproxy.git

BUG/MEDIUM: http-ana: Don't eval http-after-response ruleset on empty messages

It is not possible on response comming from a server, but an errorfile may be
empty. In this case, the http-after-response ruleset must not be evaluated
because it is totally unexpected to manipulate headers on an empty HTX message.

This patch must be backported everywhere the http-after-response rules are
supported, i.e as far as 2.2.
---

diff --git a/src/http_ana.c b/src/http_ana.c
index 9e17082882..7a9cd0bbcc 100644
--- a/src/http_ana.c
+++ b/src/http_ana.c
@@ -4556,7 +4556,7 @@ int http_forward_proxy_resp(struct stream *s, int final)
 	if (final) {
 		htx->flags |= HTX_FL_PROXY_RESP;
 
-		if (!http_eval_after_res_rules(s))
+		if (!htx_is_empty(htx) && !http_eval_after_res_rules(s))
 			return 0;
 
 		if (s->txn->meth == HTTP_METH_HEAD)