Repository: trafficserver Updated Branches: refs/heads/5.2.x 301847c04 -> b75428460
TS-3359: Use after free: Tunnel destroyed without updating HttpSM Project: http://git-wip-us.apache.org/repos/asf/trafficserver/repo Commit: http://git-wip-us.apache.org/repos/asf/trafficserver/commit/161fe7e5 Tree: http://git-wip-us.apache.org/repos/asf/trafficserver/tree/161fe7e5 Diff: http://git-wip-us.apache.org/repos/asf/trafficserver/diff/161fe7e5 Branch: refs/heads/5.2.x Commit: 161fe7e52c533c6291deb677f38bdade2f1e6fe8 Parents: 301847c Author: Brian Geffon <[email protected]> Authored: Mon Feb 2 11:03:25 2015 -0800 Committer: Leif Hedstrom <[email protected]> Committed: Thu Feb 19 21:05:28 2015 -0800 ---------------------------------------------------------------------- proxy/http/HttpSM.cc | 1 + 1 file changed, 1 insertion(+) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/trafficserver/blob/161fe7e5/proxy/http/HttpSM.cc ---------------------------------------------------------------------- diff --git a/proxy/http/HttpSM.cc b/proxy/http/HttpSM.cc index faf4451..9b865e3 100644 --- a/proxy/http/HttpSM.cc +++ b/proxy/http/HttpSM.cc @@ -2907,6 +2907,7 @@ HttpSM::tunnel_handler_server(int event, HttpTunnelProducer * p) if (is_http_server_eos_truncation(p)) { DebugSM("http", "[%" PRId64 "] [HttpSM::tunnel_handler_server] aborting HTTP tunnel due to server truncation", sm_id); tunnel.chain_abort_all(p); + ua_session = NULL; t_state.current.server->abort = HttpTransact::ABORTED; t_state.client_info.keep_alive = HTTP_NO_KEEPALIVE; t_state.current.server->keep_alive = HTTP_NO_KEEPALIVE;
