| commit | a132e5efa94c962144e78378403c566875a6d37e | [log] [tgz] |
|---|---|---|
| author | Olivier Houchard <ohouchard@haproxy.com> | Thu Nov 14 19:26:14 2019 +0100 |
| committer | Olivier Houchard <cognet@ci0.org> | Thu Nov 14 19:25:49 2019 +0100 |
| tree | 0b6a32e4f92a7d8a299ff9b7346a7009d8b1f17e | |
| parent | 9ada030697c945d0e4bcbc85870d6d25f33b76b0 [diff] |
BUG/MEDIUM: Make sure we leave the session list in session_free(). In session_free(), if we're about to destroy a connection that had no mux, make sure we leave the session_list before calling conn_free(). Otherwise, conn_free() would call session_unown_conn(), which would potentially free the associated srv_list, but session_free() also frees it, so that would lead to a double free, and random memory corruption. This should be backported to 1.9 and 2.0.