Skip to content

Conversation

@stoops
Copy link

@stoops stoops commented Nov 4, 2025

Observed that the tls_session_init() function only initializes the KS_PRIMARY key and not the KS_LAME_DUCK key and the tls_session_free() function will free ALL keys always. This is a mis-match in the init-free callback chain which can potentially cause problems. For example, if a client connects and then disconnects before the renegotiation window, the lame duck key may not be initialized and then the key_state_free() function will be called which will then call the free_buf() function last (this may likely only operate on a NULL pointer and may indeed also check for this but it is not considered a good quality code path and practice in general to have)! Thanks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant