BUG/MEDIUM: quic: Possible crash from quic_free_arngs()

All quic_arng_node objects are allocated from "pool_head_quic_arng" memory pool.
They must be deallocated calling pool_free().
This commit is contained in:
Frédéric Lécaille 2022-04-04 13:43:58 +02:00 committed by Amaury Denoyelle
parent 9cc88c3075
commit 82851bd3cb

View File

@ -3165,7 +3165,7 @@ void quic_free_arngs(struct quic_arngs *arngs)
ar = eb64_entry(&n->node, struct quic_arng_node, first);
next = eb64_next(n);
eb64_delete(n);
free(ar);
pool_free(pool_head_quic_arng, ar);
n = next;
}
}