Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix NULL Pointer Read in Stateless Retry Scenario (on Server) #1951

Merged
merged 3 commits into from
Aug 30, 2021

Conversation

nibanks
Copy link
Member

@nibanks nibanks commented Aug 30, 2021

Fixes #1938 . Essentially, if the server takes too long to set the configuration on the connection, it's possible for MsQuic to clean up some state that it still needs later (and ends up reading a NULL pointer).

The test code was added first, to 100% reproduce the original issue. Next the core code that cleans up the state was moved to the handshake complete instead of on first usage. Verified new tests now passed.

@nibanks nibanks added the Bug: Core A code bug in the Core MsQuic code label Aug 30, 2021
@nibanks nibanks requested a review from a team as a code owner August 30, 2021 18:27
@nibanks nibanks merged commit 76697e4 into main Aug 30, 2021
@nibanks nibanks deleted the nibanks/retry-source-cid-crash-fix branch August 30, 2021 20:24
@qzhuyan
Copy link
Contributor

qzhuyan commented Aug 30, 2021

I can confirm cherry-pick d62ee62 to v1.6.0 solved issue in #1938

@nibanks
Copy link
Member Author

nibanks commented Aug 30, 2021

I can confirm cherry-pick d62ee62 to v1.6.0 solved issue in #1938

Great! Thanks @qzhuyan!

@nibanks nibanks mentioned this pull request Sep 20, 2021
@nibanks nibanks mentioned this pull request Sep 20, 2021
nibanks added a commit that referenced this pull request Sep 21, 2021
nibanks added a commit that referenced this pull request Sep 21, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Bug: Core A code bug in the Core MsQuic code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Core dump NULL pointer PrevSourceCid when handshake retry
3 participants