mirror of
http://git.haproxy.org/git/haproxy.git/
synced 2024-12-12 14:35:14 +00:00
6204cd9f27
This is the continuation of previous patch called "BUG/MAJOR: samples:
check smp->strm before using it".
It happens that variables may have a session-wide scope, and that their
session is retrieved by dereferencing the stream. But nothing prevents them
from being used from a streamless context such as tcp-request connection,
thus crashing the process. Example :
tcp-request connection accept if { src,set-var(sess.foo) -m found }
In order to fix this, we have to always ensure that variable manipulation
only happens via the sample, which contains the correct owner and context,
and that we never use one from a different source. This results in quite a
large change since a lot of functions are inderctly involved in the call
chain, but the change is easy to follow.
This fix must be backported to 1.6, and requires the last two patches.
15 lines
529 B
C
15 lines
529 B
C
#ifndef _PROTO_VARS_H
|
|
#define _PROTO_VARS_H
|
|
|
|
#include <types/vars.h>
|
|
|
|
void vars_init(struct vars *vars, enum vars_scope scope);
|
|
void vars_prune(struct vars *vars, struct session *sess, struct stream *strm);
|
|
void vars_prune_per_sess(struct vars *vars);
|
|
int vars_get_by_name(const char *name, size_t len, struct sample *smp);
|
|
void vars_set_by_name(const char *name, size_t len, struct sample *smp);
|
|
int vars_get_by_desc(const struct var_desc *var_desc, struct sample *smp);
|
|
int vars_check_arg(struct arg *arg, char **err);
|
|
|
|
#endif
|