]> git.kaiwu.me - nginx.git/commit
OCSP: resolve cleanup on connection close
authorRoman Arutyunyan <arut@nginx.com>
Tue, 21 Apr 2026 10:51:41 +0000 (14:51 +0400)
committerSergey Kandaurov <s.kandaurov@f5.com>
Wed, 13 May 2026 17:19:47 +0000 (21:19 +0400)
commit71841dcedfdf46048ef5e25413fdf97a66957913
treec23978d1541da8773b691e336ba8551e4feec6fa
parent319b4ea63f8c4760c76160bdf5db22c43eb948b3
OCSP: resolve cleanup on connection close

Previously, when a client SSL connection was terminated (typically due to a
timeout) while resolving an OCSP responder, the OCSP context was freed, but
the resolve context was not.  This resulted in use-after-free on resolve
completion.

Reported by Leo Lin.
src/event/ngx_event_openssl_stapling.c