]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 6f8c520) | patch
QUIC: ngx_quic_buffer_t use-after-free protection.
authorRoman Arutyunyan <arut@nginx.com>
Tue, 28 May 2024 13:19:21 +0000 (17:19 +0400)
committerRoman Arutyunyan <arut@nginx.com>
Tue, 28 May 2024 13:19:21 +0000 (17:19 +0400)
commit9ddc6a08f4c83db5acc0a74c223ddf75a44b726d
treed6c5042b57d231e07319e732aff8769af11b2a76tree | snapshot
parent6f8c520f497edfe26f46ef6da6699174df5b3da4commit | diff
QUIC: ngx_quic_buffer_t use-after-free protection.

Previously the last chain field of ngx_quic_buffer_t could still reference freed
chains and buffers after calling ngx_quic_free_buffer().  While normally an
ngx_quic_buffer_t object should not be used after freeing, resetting last_chain
field would prevent a potential use-after-free.
src/event/quic/ngx_event_quic_frames.c diff | blob | history
nginx upstream