]> git.kaiwu.me - haproxy.git/commit
BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records
authorChristopher Faulet <cfaulet@haproxy.com>
Tue, 26 May 2026 11:56:12 +0000 (13:56 +0200)
committerChristopher Faulet <cfaulet@haproxy.com>
Tue, 26 May 2026 16:28:07 +0000 (18:28 +0200)
commit3ac082b2b2c891db4205fb04c9d7162a139d07d3
tree54c83a1c800cadfd8adc4d9035a35f070ee56424
parent1a5a33396d053fe34adfd52dbf1a767b492c630d
BUG/MEDIUM: mux-fcgi: reject stream ID 0 for application records

Records with a stream ID set to 0 are reserved to management records.
However there was no check to trigger an error if an application record is
received with a stream ID to 0. This could lead to crash becausqe management
streams (which are static and immutable) can be modified while processing
application records (STDOUT/STDERR/END_REQUEST).

To fix the issue, An error is returned if the stream ID 0 is set on
GET_VALUES_RESULT or UNKNOWN_TYPE records.

This patch must be backported to all stable versions.
src/mux_fcgi.c