]> git.ipfire.org Git - thirdparty/bind9.git/commit
Attach/detach to the listening child socket when accepting TLS
authorOndřej Surý <ondrej@isc.org>
Wed, 7 Aug 2024 06:43:12 +0000 (08:43 +0200)
committerOndřej Surý <ondrej@isc.org>
Wed, 7 Aug 2024 14:17:43 +0000 (14:17 +0000)
commit684f3eb8e62fb2dd2e6adf3272e87b1fd4b08579
tree85b4ab1396df103e8946c45b239147188b10fd9c
parentced1eb358daafbccca243050a09f760b9665a58d
Attach/detach to the listening child socket when accepting TLS

When TLS connection (TLSstream) connection was accepted, the children
listening socket was not attached to sock->server and thus it could have
been freed before all the accepted connections were actually closed.

In turn, this would cause us to call isc_tls_free() too soon - causing
cascade errors in pending SSL_read_ex() in the accepted connections.

Properly attach and detach the children listening socket when accepting
and closing the server connections.
lib/isc/netmgr/tlsstream.c