]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 9ada030) | patch
BUG/MEDIUM: Make sure we leave the session list in session_free().
authorOlivier Houchard <ohouchard@haproxy.com>
Thu, 14 Nov 2019 18:26:14 +0000 (19:26 +0100)
committerOlivier Houchard <cognet@ci0.org>
Thu, 14 Nov 2019 18:25:49 +0000 (19:25 +0100)
commita132e5efa94c962144e78378403c566875a6d37e
tree0b6a32e4f92a7d8a299ff9b7346a7009d8b1f17etree | snapshot
parent9ada030697c945d0e4bcbc85870d6d25f33b76b0commit | diff
BUG/MEDIUM: Make sure we leave the session list in session_free().

In session_free(), if we're about to destroy a connection that had no mux,
make sure we leave the session_list before calling conn_free(). Otherwise,
conn_free() would call session_unown_conn(), which would potentially free
the associated srv_list, but session_free() also frees it, so that would
lead to a double free, and random memory corruption.

This should be backported to 1.9 and 2.0.
src/session.c diff | blob | history
haproxy upstream