tree 25c1dd487b82360148d093d6b56b5979d5be0c82
parent 9faebe34cdbf3fcc0e23936aefbbdfa493997b12
author Olivier Houchard <ohouchard@haproxy.com> 1559923697 +0200
committer Willy Tarreau <w@1wt.eu> 1559929041 +0200
encoding latin1

BUG/MEDIUM: H1: When upgrading, make sure we don't free the buffer too early.

In h1_release(), when we want to upgrade the mux to h2, make sure we set
h1c->ibuf to BUF_NULL before calling conn_upgrade_mux_fe().
If the upgrade is successful, the buffer will be provided to the new mux,
h1_release() will be called recursively, it will so try to free h1c->ibuf,
and freeing the buffer we just provided to the new mux would be unfortunate.