tree d6eec92efd1e07ab1c9bfd857fe68be0e5ff985b
parent eb1d4861c2460cb0ef3fd5c6acc6f38184f0fbbe
author Olivier Houchard <ohouchard@haproxy.com> 1573755974 +0100
committer Willy Tarreau <w@1wt.eu> 1573811264 +0100
encoding latin1

BUG/MEDIUM: Make sure we leave the session list in session_free().

In session_free(), if we're about to destroy a connection that had no mux,
make sure we leave the session_list before calling conn_free(). Otherwise,
conn_free() would call session_unown_conn(), which would potentially free
the associated srv_list, but session_free() also frees it, so that would
lead to a double free, and random memory corruption.

This should be backported to 1.9 and 2.0.

(cherry picked from commit a132e5efa94c962144e78378403c566875a6d37e)
Signed-off-by: Willy Tarreau <w@1wt.eu>