]> git.ipfire.org Git - thirdparty/bind9.git/commit
DoH: avoid potential use after free for HTTP/2 session objects
authorArtem Boldariev <artem@boldariev.com>
Fri, 8 Dec 2023 12:26:46 +0000 (14:26 +0200)
committerNicki Křížek <nicki@isc.org>
Mon, 10 Jun 2024 14:40:10 +0000 (16:40 +0200)
commitc41fb499b979aa82ed63ff59b4ccff8f462d1594
tree02fc392f1e069bcc46a9d598b88ec808fad54260
parent07a5e7a921903dbb89c52b642d7dfed469d721bf
DoH: avoid potential use after free for HTTP/2 session objects

It was reported that HTTP/2 session might get closed or even deleted
before all async. processing has been completed.

This commit addresses that: now we are avoiding using the object when
we do not need it or specifically check if the pointers used are not
'NULL' and by ensuring that there is at least one reference to the
session object while we are doing incoming data processing.

This commit makes the code more resilient to such issues in the
future.
lib/isc/netmgr/http.c