tree cb8248b552dd156c9bf631fa031cc7fa5ade782e
parent a220e59ad8dd44cd71484ab5a207ed08f219c737
author Willy Tarreau <w@1wt.eu> 1679392251 +0100
committer Willy Tarreau <w@1wt.eu> 1679392251 +0100
encoding latin1

BUG/MEDIUM: applet: only set appctx->sedesc on successful allocation

If appctx_new_on() fails to allocate a task, it will not remove the
freshly allocated sedesc from the appctx despite freeing it, causing
a UAF. Let's only assign appctx->sedesc upon success.

This needs to be backported to 2.6. In 2.6 the function is slightly
different and called appctx_new(), though the issue is exactly the
same.