haproxy/src
Willy Tarreau 30fd4bd844 BUG/MEDIUM: ssl: properly reset the reused_sess during a forced handshake
We have a bug when SSL reuse is disabled on the server side : we reset
the context but do not set it to NULL, causing a multiple free of the
same entry. It seems like this bug cannot appear as-is with the current
code (or the conditions to get it are not obvious) but it did definitely
strike when trying to fix another bug with the SNI which forced a new
handshake.

This fix should be backported to 1.7, 1.6 and 1.5.
2016-12-22 21:54:21 +01:00
..
51d.c CLEANUP: 51d: move global settings out of the global section 2016-12-21 21:30:54 +01:00
acl.c CLEANUP: sample: report "converter" instead of "conv method" in error messages 2016-11-25 07:36:22 +01:00
applet.c BUG/MAJOR: Fix how the list of entities waiting for a buffer is handled 2016-12-12 19:11:04 +01:00
arg.c
auth.c CLEANUP: auth: use the build options list to report its support 2016-12-21 21:30:54 +01:00
backend.c MINOR: proxy: Add fe_name/be_name fetchers next to existing fe_id/be_id 2016-12-12 15:10:43 +01:00
base64.c
buffer.c BUG/MAJOR: Fix how the list of entities waiting for a buffer is handled 2016-12-12 19:11:04 +01:00
cfgparse.c MEDIUM: compression: move the zlib-specific stuff from global.h to compression.c 2016-12-22 20:00:46 +01:00
channel.c BUG/MEDIUM: channel: bad unlikely macro 2016-11-14 15:23:17 +01:00
checks.c CLEANUP: checks: make use of the post-init registration to start checks 2016-12-21 21:30:54 +01:00
chunk.c
cli.c MINOR: appctx/cli: remove the env entry from the appctx union 2016-12-16 19:40:14 +01:00
compression.c MEDIUM: compression: move the zlib-specific stuff from global.h to compression.c 2016-12-22 20:00:46 +01:00
connection.c
da.c CLEANUP: da: move global settings out of the global section 2016-12-21 21:30:54 +01:00
dns.c MINOR: appctx/cli: remove the "dns" entry from the appctx union 2016-12-16 19:40:14 +01:00
ev_epoll.c
ev_kqueue.c
ev_poll.c
ev_select.c
fd.c
filters.c CLEANUP: filters: use the function registration to initialize all proxies 2016-12-21 21:30:54 +01:00
flt_http_comp.c OPTIM: http: move all http character classs tables into a single one 2016-11-05 15:58:08 +01:00
flt_spoe.c BUG/MAJOR: Fix how the list of entities waiting for a buffer is handled 2016-12-12 19:11:04 +01:00
flt_trace.c MINOR: filters: Add check_timeouts callback to handle timers expiration on streams 2016-11-21 15:29:58 +01:00
freq_ctr.c
frontend.c MINOR: proxy: Add fe_name/be_name fetchers next to existing fe_id/be_id 2016-12-12 15:10:43 +01:00
haproxy-systemd-wrapper.c
haproxy.c MEDIUM: compression: move the zlib-specific stuff from global.h to compression.c 2016-12-22 20:00:46 +01:00
hash.c
hdr_idx.c
hlua_fcn.c MINOR: lua: Add tokenize function. 2016-11-24 21:35:34 +01:00
hlua.c CLEANUP: lua: use the build options list to report it 2016-12-21 21:30:54 +01:00
i386-linux-vsys.c
lb_chash.c
lb_fas.c
lb_fwlc.c
lb_fwrr.c
lb_map.c
listener.c
log.c MEDIUM: log-format: Use standard HAProxy log system to report errors 2016-11-25 07:32:58 +01:00
lru.c
mailers.c
map.c CLEANUP: cli: remove assignments to st0 and st2 in keyword parsers 2016-11-24 16:59:28 +01:00
memory.c CLEANUP: memory: remove the now unused cli_parse_show_pools() function 2016-12-16 19:40:13 +01:00
namespace.c CLEANUP: namespaces: use the build options list to report it 2016-12-21 21:30:54 +01:00
pattern.c
payload.c CLEANUP: ssl: Remove goto after return dead code 2016-11-14 18:15:20 +01:00
peers.c BUG/MAJOR: Fix how the list of entities waiting for a buffer is handled 2016-12-12 19:11:04 +01:00
pipe.c
proto_http.c MINOR: Do not forward the header "Expect: 100-continue" when the option http-buffer-request is set 2016-12-12 17:33:42 +01:00
proto_tcp.c CLEANUP: tcp: use the build options list to report transparent modes 2016-12-21 21:30:54 +01:00
proto_udp.c
proto_uxst.c DOC: Spelling fixes 2016-11-29 07:29:57 +01:00
protocol.c
proxy.c MINOR: appctx/cli: remove the "server_state" entry from the appctx union 2016-12-16 19:40:14 +01:00
queue.c
raw_sock.c MINOR: connection: add names for transport and data layers 2016-11-24 16:58:12 +01:00
rbtree.c
regex.c CLEANUP: regex: use the build options list to report the regex type 2016-12-21 21:30:54 +01:00
sample.c CLEANUP: sample: report "converter" instead of "conv method" in error messages 2016-11-25 07:36:22 +01:00
server.c BUG/MINOR: cli: be sure to always warn the cli applet when input buffer is full 2016-12-12 17:58:11 +01:00
session.c BUG/MAJOR: stream: fix session abort on resource shortage 2016-12-04 20:16:52 +01:00
shctx.c MEDIUM: ssl: Add support for OpenSSL 1.1.0 2016-11-08 20:54:41 +01:00
signal.c
ssl_sock.c BUG/MEDIUM: ssl: properly reset the reused_sess during a forced handshake 2016-12-22 21:54:21 +01:00
standard.c REORG: cli: move dump_text(), dump_text_line(), and dump_binary() to standard.c 2016-11-24 16:59:27 +01:00
stats.c CLEANUP: stats: move a misplaced stats context initialization 2016-12-16 19:40:13 +01:00
stick_table.c CLEANUP: applet/table: add an "action" entry in ->table context 2016-12-14 16:48:16 +01:00
stream_interface.c BUG/MINOR: stream-int: automatically release SI_FL_WAIT_DATA on SHUTW_NOW 2016-12-14 16:48:16 +01:00
stream.c MEDIUM: lua: remove Lua struct from session, and allocate it with memory pools 2016-12-21 15:24:56 +01:00
task.c MINOR: task: Rename run_queue and run_queue_cur counters 2016-12-12 19:10:54 +01:00
tcp_rules.c REORG: tcp-rules: move tcp rules processing to their own file 2016-11-25 15:57:38 +01:00
time.c
trace.c
uri_auth.c
vars.c BUG/MEDIUM: variables: some variable name can hide another ones 2016-12-12 14:34:56 +01:00
wurfl.c CLEANUP: wurfl: move global settings out of the global section 2016-12-21 21:30:54 +01:00
xxhash.c