tree e33ce26c2e0bb5d5438e07525fe9900179bfc16b
parent f9af9d7f3c0d7906bf51208e8e9a655ebf52b605
author Emmanuel Hocdet <manu@gandi.net> 1572887972 +0100
committer William Lallemand <wlallemand@haproxy.org> 1574085332 +0100

BUG/MINOR: ssl: ssl_pkey_info_index ex_data can store a dereferenced pointer

With CLI cert update, sni_ctx can be removed at runtime. ssl_pkey_info_index
ex_data is filled with one of sni_ctx.kinfo pointer but SSL_CTX can be shared
between sni_ctx. Remove and free a sni_ctx can lead to a segfault when
ssl_pkey_info_index ex_data is used (in ssl_sock_get_pkey_algo). Removing the
dependency on ssl_pkey_info_index ex_data is the easiest way to fix the issue.