From: Ondřej Surý <ondrej@isc.org>
Date: Sat, 14 Mar 2026 11:54:27 +0000 (+0100)
Subject: Fix missing server socket detach in TLS accept error path
X-Git-Tag: v9.20.22~29^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=769dff3e6f65ca386dac4398d1f8b94b645848da;p=thirdparty%2Fbind9.git

Fix missing server socket detach in TLS accept error path

When TLS creation fails in tlslisten_acceptcb(), tlssock->server
was not detached before detaching tlssock itself.

(cherry picked from commit 2ab3d7c0757ef8dc3d7a979bad1443a9454e8f55)
---

diff --git a/lib/isc/netmgr/tlsstream.c b/lib/isc/netmgr/tlsstream.c
index 8d5fe1fd377..2e5276b369f 100644
--- a/lib/isc/netmgr/tlsstream.c
+++ b/lib/isc/netmgr/tlsstream.c
@@ -935,6 +935,7 @@ tlslisten_acceptcb(isc_nmhandle_t *handle, isc_result_t result, void *cbarg) {
 	if (tlssock->tlsstream.tls == NULL) {
 		tlssock->closed = true;
 		isc_tlsctx_free(&tlssock->tlsstream.ctx);
+		isc__nmsocket_detach(&tlssock->server);
 		isc__nmsocket_detach(&tlssock);
 		return ISC_R_TLSERROR;
 	}