]> git.ipfire.org Git - thirdparty/haproxy.git/commit
BUG/MAJOR: ssl/ocsp: fix NULL conn object dereferencing to access QUIC TLS counters
authorFrederic Lecaille <flecaille@haproxy.com>
Mon, 6 Jan 2025 10:06:55 +0000 (11:06 +0100)
committerFrederic Lecaille <flecaille@haproxy.com>
Tue, 7 Jan 2025 14:19:42 +0000 (15:19 +0100)
commitd7fc90afe91569c64e491bb33a4b564da7a5bc43
treea395dae35f35d2bf1f3e5ff656c44f6bb73c3662
parent892eb2bb2ceba2c0e80d51eed69dfc9494a56988
BUG/MAJOR: ssl/ocsp: fix NULL conn object dereferencing to access QUIC TLS counters

This bug arrived with this commit in the current dev branch:

056ec51c26 MEDIUM: ssl/ocsp: counters for OCSP stapling

and could occur for QUIC connections during handshake when the underlying
<conn> connection object is not already initialized. So in this case the TLS
counters attached to TLS listeners cannot be accessed through this object but
from the QUIC connection object.

Modify the code to initialize the listener (<li> variable) for both QUIC
and TCP connections, then initialize the variables for the TLS counters
if the listener is also initialized.

Thank you to @Tristan971 for having reported this issue in GH #2833.

Must be backported with the commit mentioned above if it is planned to be
backported.
src/ssl_ocsp.c