]> git.kaiwu.me - nginx.git/commit
QUIC: fixed possible segfault on handshake failures.
authorJan Svojanovsky <jan.svojanovsky@cdn77.com>
Tue, 9 Dec 2025 11:27:02 +0000 (12:27 +0100)
committerSergey Kandaurov <s.kandaurov@f5.com>
Tue, 9 Dec 2025 17:25:10 +0000 (21:25 +0400)
commit66fde99b1d9113128778125c2f942f1d0f016be5
tree20b1b87a680d0fb1a148b2719045485026aa8986
parent61690b5dc04ac31e4b402695cfc71c504be489dd
QUIC: fixed possible segfault on handshake failures.

When using OpenSSL 3.5, the crypto_release_rcd QUIC callback can be
called late, after the QUIC connection was already closed on handshake
failure, resulting in a segmentation fault.  For instance, it happened
if a client Finished message didn't align with a record boundary.
src/event/quic/ngx_event_quic_ssl.c