tree d6d4dad4bb19a4a958277c4a1b65489811f49ce9
parent b7f9d126e269f3b5b7dc05e39fcf207ba86a330c
author Willy Tarreau <w@1wt.eu> 1240812693 +0200
committer Willy Tarreau <w@1wt.eu> 1240812693 +0200
encoding latin1

[CRITICAL] uninitialized response field can sometimes cause crashes

The response message in the transaction structure was not properly
initialised at session initialisation. In theory it cannot cause any
trouble since the affected field os expected to always remain NULL.
However, in some circumstances, such as building on 64-bit platforms
with certain options, the struct session can be exactly 1024 bytes,
the same size of the requri field, so the pools are merged and the
uninitialised field may contain non-null data, causing crashes if
an invalid response is encountered and archived.

The fix simply consists in correctly initialising the missing fields.
This bug cannot affect architectures where the session pool is not
shared (32-bit architectures), but this is only by pure luck.