From 2d505e57542ef39fc0bd66ec8411d2ed53259f71 Mon Sep 17 00:00:00 2001
From: willy tarreau <willy@wtap.(none)>
Date: Sun, 21 May 2006 08:32:50 +0200
Subject: [PATCH] [CRITICAL] potential NULL dereference when counting stats in
 dispatch mode

---
 haproxy.c | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/haproxy.c b/haproxy.c
index 254afc057..cc2be57c7 100644
--- a/haproxy.c
+++ b/haproxy.c
@@ -5398,7 +5398,8 @@ int process_srv(struct session *t) {
 		    tv_eternity(&t->srexpire);
 		
 		t->srv_state = SV_STDATA;
-		t->srv->cum_sess++;
+		if (t->srv)
+		    t->srv->cum_sess++;
 		rep->rlim = rep->data + BUFSIZE; /* no rewrite needed */
 
 		/* if the user wants to log as soon as possible, without counting
@@ -5410,7 +5411,8 @@ int process_srv(struct session *t) {
 	    }
 	    else {
 		t->srv_state = SV_STHEADERS;
-		t->srv->cum_sess++;
+		if (t->srv)
+		    t->srv->cum_sess++;
 		rep->rlim = rep->data + BUFSIZE - MAXREWRITE; /* rewrite needed */
 	    }
 	    tv_eternity(&t->cnexpire);