The following patch has added an output parameter in conn_create_mux()
to report if the connection has been destroyed. This can happen for
frontend connection only.
In case the connection is destroyed, tasklet is set to NULL as expected
to avoid returning an invalid pointer. However, conn pointer is left
unchanged. This leads to a crash if traces are activated. The proper fix
is to also set conn to NULL.
This must be backported up to 3.2.
if (ret < 0)
closed_connection = 1;
}
- if (closed_connection)
+ if (closed_connection) {
+ conn = NULL;
t = NULL;
+ }
goto leave;
}
}