]> git.kaiwu.me - nginx.git/commit
projects / nginx.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 47c993d) | patch
QUIC: fixed null pointer dereference in MAX_DATA handler.
authorMariano Di Martino <mariano.dimartino@uhasselt.be>
Fri, 3 Sep 2021 11:23:50 +0000 (14:23 +0300)
committerMariano Di Martino <mariano.dimartino@uhasselt.be>
Fri, 3 Sep 2021 11:23:50 +0000 (14:23 +0300)
commit9985ab86bf0eb3a58f26d0396c1828d4a70faf03
treefea26336873b5bd9c2ca5eed1fbe09d32124c9fctree | snapshot
parent47c993da63a1351193207588d7f9ef1327b1744bcommit | diff
QUIC: fixed null pointer dereference in MAX_DATA handler.

If a MAX_DATA frame was received before any stream was created, then the worker
process would crash in nginx_quic_handle_max_data_frame() while traversing the
stream tree.  The issue is solved by adding a check that makes sure the tree is
not empty.
src/event/quic/ngx_event_quic_streams.c diff | blob | history
nginx upstream