]> git.kaiwu.me - haproxy.git/commit
projects / haproxy.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a9e3dec) | patch
BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
authorValentine Krasnobaeva <vkrasnobaeva@haproxy.com>
Mon, 15 Jul 2024 12:57:05 +0000 (14:57 +0200)
committerWilly Tarreau <w@1wt.eu>
Wed, 17 Jul 2024 12:52:11 +0000 (14:52 +0200)
commit9371c28c28311f34d03c6e44bbeaf2214a1bec44
tree3a590058905848822fe2af324047852ed4497eabtree | snapshot
parenta9e3decd7602db661cdaec91f105ac6459f13637commit | diff
BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path

We could run under heavy load in containers or on premises and some automatic
tool in parallel could use CLI to check OCSP updates statuses or to upload new
OCSP responses. So, calloc() to store OCSP update callback arguments may fail
and ocsp_tree_lock need to be unlocked, when exiting due to this failure.

This needs to be backported in all stable versions until v2.4.0 included.
src/ssl_sock.c diff | blob | history
haproxy upstream