BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path
We could run under heavy load in containers or on premises and some automatic
tool in parallel could use CLI to check OCSP updates statuses or to upload new
OCSP responses. So, calloc() to store OCSP update callback arguments may fail
and ocsp_tree_lock need to be unlocked, when exiting due to this failure.
This needs to be backported in all stable versions until v2.4.0 included.
(cherry picked from commit 9371c28c28311f34d03c6e44bbeaf2214a1bec44)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 47852a2c86efc29c56946f82d3196bd823550950)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 48292d62a086c0d4e595130a2f32599f91541805)
Signed-off-by: Willy Tarreau <w@1wt.eu>
1 file changed