BUG/MEDIUM: quic: Possible crash from quic_free_arngs()

All quic_arng_node objects are allocated from "pool_head_quic_arng" memory pool.
They must be deallocated calling pool_free().

diff --git a/src/xprt_quic.c b/src/xprt_quic.c
index 9dd280a18696e1656f2f9d4e25e0a0966353af51..d3ab7076e5b505f7bad6534cfe534ea85b912aa6 100644 (file)
--- a/src/xprt_quic.c
+++ b/src/xprt_quic.c
@@ -3165,7 +3165,7 @@ void quic_free_arngs(struct quic_arngs *arngs)
                ar = eb64_entry(&n->node, struct quic_arng_node, first);
                next = eb64_next(n);
                eb64_delete(n);
-               free(ar);
+               pool_free(pool_head_quic_arng, ar);
                n = next;
        }
 }