IntenseWebs/nginx
3
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2024-12-22 15:13:28 -06:00
Code Issues Packages Projects Releases Wiki Activity

Stream: fixed possible use of a freed connection.

Browse Source 
The session handler may result in session termination, thus a connection
pool (from which c->udp was allocated) may be destroyed.
This commit is contained in:
Vladimir Homutov 2018-11-07 13:22:14 +03:00
parent 6351d8306f
commit 7e3041b79f
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/event/ngx_event_udp.c
View File

@ -261,7 +261,10 @@ ngx_event_recvmsg(ngx_event_t *ev)
rev->handler(rev); rev->handler(rev);
c->udp->buffer = NULL; if (c->udp) {
c->udp->buffer = NULL;
}
rev->ready = 0; rev->ready = 0;
goto next; goto next;
@ -561,6 +564,8 @@ ngx_delete_udp_connection(void *data)
ngx_connection_t *c = data; ngx_connection_t *c = data;
ngx_rbtree_delete(&c->listening->rbtree, &c->udp->node); ngx_rbtree_delete(&c->listening->rbtree, &c->udp->node);
c->udp = NULL;
} }