tree 5a99199003b0bfd54163d9a76af5d2b136d2c434
parent dee5920e34cf1f1915409cef5ae78bee097abf12
author Valentine Krasnobaeva <vkrasnobaeva@haproxy.com> 1721048225 +0200
committer Willy Tarreau <w@1wt.eu> 1722257700 +0200
encoding latin1

BUG/MEDIUM: ssl_sock: fix deadlock in ssl_sock_load_ocsp() on error path

We could run under heavy load in containers or on premises and some automatic
tool in parallel could use CLI to check OCSP updates statuses or to upload new
OCSP responses. So, calloc() to store OCSP update callback arguments may fail
and ocsp_tree_lock need to be unlocked, when exiting due to this failure.

This needs to be backported in all stable versions until v2.4.0 included.

(cherry picked from commit 9371c28c28311f34d03c6e44bbeaf2214a1bec44)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 47852a2c86efc29c56946f82d3196bd823550950)
Signed-off-by: Willy Tarreau <w@1wt.eu>
(cherry picked from commit 48292d62a086c0d4e595130a2f32599f91541805)
Signed-off-by: Willy Tarreau <w@1wt.eu>