]> git.ipfire.org Git - thirdparty/squid.git/commit
Do not leak ex_data for SSL state that survived reconfigure.
authorAlex Rousskov <rousskov@measurement-factory.com>
Mon, 2 Jun 2014 05:26:17 +0000 (22:26 -0700)
committerAmos Jeffries <squid3@treenet.co.nz>
Mon, 2 Jun 2014 05:26:17 +0000 (22:26 -0700)
commit56a35ad1f0c66cdad042e28cfd1a1f41521d4d5d
tree6896bf188ae1283490fa328fabacd797da0f1ed4
parente3c2ea0184198f66df3c2df9e916f51b617af50a
Do not leak ex_data for SSL state that survived reconfigure.

SSL_get_ex_new_index() allocates a new index on every call, even if its
parameters remain unchanged. It should be called once per process
lifetime.

Besides leaking, this 12 year-old(!) bug could probably make some SSL
code misbehave during reconfigure because reconfigure would change the
supposedly constant ex_data indexes.
src/ssl/support.cc