JosiahWI opened a new pull request, #13829: URL: https://github.com/apache/trafficserver/pull/13829
The `query_responder` routine in OCSPStapling schedues an event for an HTTP request. If the request does not complete within a timeout, it checks that the event has not started yet, and cancels it if so. There is a TOCTOU race between the check and the event cancellation, such that the event can be initiated and completed after the check, and the cancellation can be a use-after-free. This bug is highly unlikely to be observed in practice, but this patch eliminates the risk by taking the lock before the check and holding it through the cancellation. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
