]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: d2a1665) | patch
BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces
authorFrederic Lecaille <flecaille@haproxy.com>
Thu, 27 Nov 2025 10:22:46 +0000 (11:22 +0100)
committerFrederic Lecaille <flecaille@haproxy.com>
Mon, 8 Dec 2025 09:40:59 +0000 (10:40 +0100)
commit63273c795f5d2104bbe504fb9eac467ae987ecd3
tree3a65635006a10177562de88ebafbaf836fc28b1dtree | snapshot
parentd2a1665af0450979d0a6d1bf43d0b8cd99e08d7bcommit | diff
BUG/MINOR: quic/ssl: crash in ClientHello callback ssl traces

Such crashes may occur for QUIC frontends only when the SSL traces are enabled.

ssl_sock_switchctx_cbk() ClientHello callback may be called without any connection
initialize (<conn>) for QUIC connections leading to crashes when passing
conn->err_code to TRACE_ERROR().

Modify the TRACE_ERROR() statement to pass this parameter only when <conn> is
initialized.

Must be backported as far as 3.2.
src/ssl_clienthello.c diff | blob | history
haproxy upstream