| commit | 762475e1f957936144e48c51a6befdef3f5fe1db | [log] [tgz] |
|---|---|---|
| author | Willy Tarreau <w@1wt.eu> | Thu Jan 10 10:33:32 2019 +0100 |
| committer | Willy Tarreau <w@1wt.eu> | Thu Jan 10 19:47:43 2019 +0100 |
| tree | 8dc486ee624853a6ec0c20a94a3a7b3d49ec6a4c | |
| parent | ada5d091424a18208525ece0f590092c25bbde0c [diff] |
BUG/MEDIUM: connection: properly unregister the mux on failed initialization When mux->init() fails, session_free() will call it again to unregister it while it was already done, resulting in null derefs or use-after-free. This typically happens on out-of-memory conditions during H1 or H2 connection or stream allocation. This fix must be backported to 1.9.