tree 2cf2ae41e2c7d0ff16ef9a4394c42b8f2203ac39
parent 583895a02732ea45ba3e2ff9256ec410a13a3d8c
author Amaury Denoyelle <adenoyelle@haproxy.com> 1718887282 +0200
committer Christopher Faulet <cfaulet@haproxy.com> 1719995057 +0200

BUG/MINOR: mux-quic: fix crash on qcs SD alloc failure

Since the following commit, sedesc are created since QCS instantiation
in qcs_new().
  086e51017e7731ee9820b882fe6e8cc5f0dd5352
  BUG/MEDIUM: mux-quic: Create sedesc in same time of the QUIC stream

However, sedesc is initialized before other QCS mandatory fields. If
sedesc allocation fails, a crash would occur on qcs_free() invocation
for QCS early release. To fix this, delay sedesc allocation until
function end.

This bug was detected using -dMfail.

This should be backported up to 2.6.

(cherry picked from commit 3aded1d3752a12af9b8e48f445218230e6967a06)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 96c254fd3e647f3e519d5ba2c39e8c4a64215bb5)
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>
(cherry picked from commit 408cb66b2a08d39e066d92c9038c7877603f8938)
[cf: No zero-copy forwarding in 2.8]
Signed-off-by: Christopher Faulet <cfaulet@haproxy.com>