]> git.ipfire.org Git - thirdparty/haproxy.git/commit
projects / thirdparty / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 280f42b) | patch
BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL
authorChristopher Faulet <cfaulet@haproxy.com>
Mon, 19 Feb 2018 13:25:15 +0000 (14:25 +0100)
committerWilly Tarreau <w@1wt.eu>
Mon, 19 Feb 2018 14:37:47 +0000 (15:37 +0100)
commit4ac77a98cda3d0f9b1d9de7bbbda2c91357f0767
treeee2a927e8d32e6dcc7e3e14bf3a3ddd1d190d0e9tree | snapshot
parent280f42b99e8df36912b8982a62800613e48e5549commit | diff
BUG/MEDIUM: ssl: Shutdown the connection for reading on SSL_ERROR_SYSCALL

When SSL_read returns SSL_ERROR_SYSCALL and errno is unset or set to EAGAIN, the
connection must be shut down for reading. Else, the connection loops infinitly,
consuming all the CPU.

The bug was introduced in the commit 7e2e50500 ("BUG/MEDIUM: ssl: Don't always
treat SSL_ERROR_SYSCALL as unrecovarable."). This patch must be backported in
1.8 too.
src/ssl_sock.c diff | blob | blame | history
Mirror of https://github.com/haproxy/haproxy.git