[openssl/openssl] 4d9e2a: ssl/quic/quic_ackm.c: fix use after free for apkt ...
"'Loganaden Velvindron' via openssl-commits" <[email protected]>
| Newsgroups | gmane.comp.encryption.openssl.cvs |
|---|---|
| Message-ID | <openssl/openssl/push/refs/heads/master/[email protected]> |
Branch: refs/heads/master
Home: https://github.com/openssl/openssl
Commit: 4d9e2a5797ec74a20426a6185df01d10a770ccc5
https://github.com/openssl/openssl/commit/4d9e2a5797ec74a20426a6185df01d10a770ccc5
Author: Loganaden Velvindron <[email protected]>
Date: 2026-06-21 (Sun, 21 Jun 2026)
Changed paths:
M ssl/quic/quic_ackm.c
Log Message:
-----------
ssl/quic/quic_ackm.c: fix use after free for apkt in ackm_on_pkts_acked()
Store in_flight flag in a local variable for later use, as apkt->on_acked()
may free apkt.
Fixes: 427a02ad0a71 "QUIC ACKM: Don't record non-inflight packets in CC"
Signed-off-by: Loganaden Velvindron <[email protected]>
Reviewed-by: Eugene Syromiatnikov <[email protected]>
Reviewed-by: Norbert Pocs <[email protected]>
MergeDate: Sun Jun 21 13:55:08 2026
(Merged from https://github.com/openssl/openssl/pull/31447)
To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications
--
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/1eaf29-4d9e2a%40github.com.