IntenseWebs/nginx
3
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2025-02-25 18:55:26 -06:00
Code Issues Packages Projects Releases Wiki Activity

QUIC: ngx_quic_buffer_t use-after-free protection.

Browse Source 
Previously the last chain field of ngx_quic_buffer_t could still reference freed
chains and buffers after calling ngx_quic_free_buffer().  While normally an
ngx_quic_buffer_t object should not be used after freeing, resetting last_chain
field would prevent a potential use-after-free.
This commit is contained in:
Roman Arutyunyan 2024-05-28 17:19:21 +04:00
parent 376f12e40a
commit 0e7702e066
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/event/quic/ngx_event_quic_frames.c
View File

@ -648,6 +648,7 @@ ngx_quic_free_buffer(ngx_connection_t *c, ngx_quic_buffer_t *qb)
ngx_quic_free_chain(c, qb->chain); ngx_quic_free_chain(c, qb->chain);
qb->chain = NULL; qb->chain = NULL;
qb->last_chain = NULL;
} }