tree 8dc486ee624853a6ec0c20a94a3a7b3d49ec6a4c
parent ada5d091424a18208525ece0f590092c25bbde0c
author Willy Tarreau <w@1wt.eu> 1547112812 +0100
committer Willy Tarreau <w@1wt.eu> 1547146063 +0100
encoding latin1

BUG/MEDIUM: connection: properly unregister the mux on failed initialization

When mux->init() fails, session_free() will call it again to unregister
it while it was already done, resulting in null derefs or use-after-free.
This typically happens on out-of-memory conditions during H1 or H2 connection
or stream allocation.

This fix must be backported to 1.9.