From 82851bd3cbf8ad647971988e0303b2e0b0284511 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20L=C3=A9caille?= Date: Mon, 4 Apr 2022 13:43:58 +0200 Subject: [PATCH] BUG/MEDIUM: quic: Possible crash from quic_free_arngs() All quic_arng_node objects are allocated from "pool_head_quic_arng" memory pool. They must be deallocated calling pool_free(). --- src/xprt_quic.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/xprt_quic.c b/src/xprt_quic.c index 9dd280a18..d3ab7076e 100644 --- a/src/xprt_quic.c +++ b/src/xprt_quic.c @@ -3165,7 +3165,7 @@ void quic_free_arngs(struct quic_arngs *arngs) ar = eb64_entry(&n->node, struct quic_arng_node, first); next = eb64_next(n); eb64_delete(n); - free(ar); + pool_free(pool_head_quic_arng, ar); n = next; } }