]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: f9af9d7) | patch
BUG/MINOR: ssl: ssl_pkey_info_index ex_data can store a dereferenced pointer
authorEmmanuel Hocdet <manu@gandi.net>
Mon, 4 Nov 2019 17:19:32 +0000 (18:19 +0100)
committerWilliam Lallemand <wlallemand@haproxy.org>
Mon, 18 Nov 2019 13:55:32 +0000 (14:55 +0100)
commitc3775d28f9be97696e4ded94bf647c0d34cf9f54
treee33ce26c2e0bb5d5438e07525fe9900179bfc16btree | snapshot
parentf9af9d7f3c0d7906bf51208e8e9a655ebf52b605commit | diff
BUG/MINOR: ssl: ssl_pkey_info_index ex_data can store a dereferenced pointer

With CLI cert update, sni_ctx can be removed at runtime. ssl_pkey_info_index
ex_data is filled with one of sni_ctx.kinfo pointer but SSL_CTX can be shared
between sni_ctx. Remove and free a sni_ctx can lead to a segfault when
ssl_pkey_info_index ex_data is used (in ssl_sock_get_pkey_algo). Removing the
dependency on ssl_pkey_info_index ex_data is the easiest way to fix the issue.
src/ssl_sock.c diff | blob | history
haproxy upstream