commit 89a2ceb1fba7ea59589cb63df143ac31804a0306
author Frédéric Lécaille <flecaille@haproxy.com> Wed Apr 20 15:59:07 2022 +0200
committer Amaury Denoyelle <adenoyelle@haproxy.com> Thu Apr 21 15:27:33 2022 +0200
tree 92dcfb37bb34e915409fa750a1e2d9538dfa6282
parent 85c0ff5987d45bb5dc03fdcbee2f64407792a59f

BUG/MEDIUM: quic: Possible crash with released mux

It is possible the xprt layer have to process retransmitted STREAM frames after
the mux was released. In this case, there is no need to try to wake it up.

src/xprt_quic.c

diff --git a/src/xprt_quic.c b/src/xprt_quic.c
index 21abd85..c1a7be1 100644
--- a/src/xprt_quic.c
+++ b/src/xprt_quic.c
@@ -1544,7 +1544,7 @@
 		pool_free(pool_head_quic_frame, frm);
 	}
 
-	if (stream_acked) {
+	if (stream_acked && qc->mux_state == QC_MUX_READY) {
 		struct qcc *qcc = qc->qcc;
 
 		if (qcc->subs && qcc->subs->events & SUB_RETRY_SEND) {