[
https://issues.apache.org/jira/browse/TS-3031?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14105799#comment-14105799
]
ASF subversion and git services commented on TS-3031:
-----------------------------------------------------
Commit 1b9697ed7527ffcf270ba7abd8ce21322ba9758d in trafficserver's branch
refs/heads/master from [~briang]
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=1b9697e ]
TS-3031: Updating CHANGES
> Race condition in SSLNextProtocolSet::advertiseProtocols
> --------------------------------------------------------
>
> Key: TS-3031
> URL: https://issues.apache.org/jira/browse/TS-3031
> Project: Traffic Server
> Issue Type: Bug
> Components: Core, SSL
> Reporter: Brian Geffon
> Assignee: Brian Geffon
> Fix For: 5.1.0
>
>
> We've observed a bug in a production environment where clients would receive
> malformed NPN sets. This is caused by a race condition in
> SSLNextProtocolSet::advertiseProtocols:
> {code}
> if (!npn && !this->endpoints.empty()) {
> create_npn_advertisement(this->endpoints, &npn, &npnsz);
> }
> {code}
> Obviously this code is attempting to initailize the npn offer string on the
> first SSL request to that port, this is a race condition. I have a fix that
> will be committed today.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
