mirror of
http://git.haproxy.org/git/haproxy.git/
synced 2024-12-14 23:44:41 +00:00
45 lines
1.3 KiB
Plaintext
45 lines
1.3 KiB
Plaintext
# commit 28962c9
|
|
# BUG/MAJOR: ssl: OpenSSL context is stored in non-reserved memory slot
|
|
#
|
|
# We never saw unexplicated crash with SSL, so I suppose that we are
|
|
# luck, or the slot 0 is always reserved. Anyway the usage of the macro
|
|
# SSL_get_app_data() and SSL_set_app_data() seem wrong. This patch change
|
|
# the deprecated functions SSL_get_app_data() and SSL_set_app_data()
|
|
# by the new functions SSL_get_ex_data() and SSL_set_ex_data(), and
|
|
# it reserves the slot in the SSL memory space.
|
|
#
|
|
# For information, this is the two declaration which seems wrong or
|
|
# incomplete in the OpenSSL ssl.h file. We can see the usage of the
|
|
# slot 0 whoch is hardcoded, but never reserved.
|
|
#
|
|
# #define SSL_set_app_data(s,arg) (SSL_set_ex_data(s,0,(char *)arg))
|
|
# #define SSL_get_app_data(s) (SSL_get_ex_data(s,0))
|
|
|
|
|
|
varnishtest "OpenSSL bug: Random crashes"
|
|
feature ignore_unknown_macro
|
|
|
|
|
|
haproxy h1 -conf {
|
|
global
|
|
tune.ssl.default-dh-param 2048
|
|
tune.ssl.capture-cipherlist-size 1
|
|
|
|
listen frt
|
|
mode http
|
|
${no-htx} option http-use-htx
|
|
bind "fd@${frt}" ssl crt ${testdir}/common.pem
|
|
http-request redirect location /
|
|
} -start
|
|
|
|
shell {
|
|
HOST=${h1_frt_addr}
|
|
if [ "${h1_frt_addr}" = "::1" ] ; then
|
|
HOST="\[::1\]"
|
|
fi
|
|
for i in 1 2 3 4 5; do
|
|
curl -i -k https://$HOST:${h1_frt_port} & pids="$pids $!"
|
|
done
|
|
wait $pids
|
|
}
|