]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 376f12e) | patch
QUIC: ngx_quic_buffer_t use-after-free protection.
authorRoman Arutyunyan <arut@nginx.com>
Tue, 28 May 2024 13:19:21 +0000 (17:19 +0400)
committerRoman Arutyunyan <arut@nginx.com>
Tue, 28 May 2024 13:19:21 +0000 (17:19 +0400)
commit0e7702e06655e3b439be8fbcd57bc91539912c2f
tree5d4bcaa76e6d487a22729e74af37c0dcd1af8651tree | snapshot
parent376f12e40adc83859a4ddea21d27d7c053ce02f8commit | diff
QUIC: ngx_quic_buffer_t use-after-free protection.

Previously the last chain field of ngx_quic_buffer_t could still reference freed
chains and buffers after calling ngx_quic_free_buffer().  While normally an
ngx_quic_buffer_t object should not be used after freeing, resetting last_chain
field would prevent a potential use-after-free.
src/event/quic/ngx_event_quic_frames.c diff | blob | history
nginx upstream