| commit | 759ca1eacc406bf32919964a9d1881cc761caf28 | [log] [tgz] |
|---|---|---|
| author | Willy Tarreau <w@1wt.eu> | Wed Jan 23 14:39:41 2019 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Thu Jan 24 13:52:10 2019 +0100 |
| tree | f7c20f197e66d433de233a6b139367d06b8ff92e | |
| parent | b57af617c06347af2284ac7949a7ddd7e52b4e41 [diff] |
BUG/MAJOR: mux-h2: don't destroy the stream on failed allocation in h2_snd_buf() In case we cannot allocate a stream ID for an outgoing stream, the stream will be aborted. The problem is that we also release it and it will be destroyed again by the application detecting the error, leading to a NULL dereference in h2_shutr() and h2_shutw(). Let's only mark the error on the CS and let the rest of the code handle the close. This should be backported to 1.9.