You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@trafficserver.apache.org by GitBox <gi...@apache.org> on 2020/07/08 21:44:35 UTC
[GitHub] [trafficserver] randall opened a new pull request #6985: Fixes use after free when boringssl is used
randall opened a new pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985
Ownership of the ca_list is transferred when SSL_CTX_set_client_CA_list
is called. This change delays that transfer to after the elements are
hashed.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] randall commented on pull request #6985: Fixes use after free when boringssl is used
Posted by GitBox <gi...@apache.org>.
randall commented on pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985#issuecomment-655789533
I found this using GuardMalloc on macOS.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] randall commented on pull request #6985: Fixes use after free when boringssl is used
Posted by GitBox <gi...@apache.org>.
randall commented on pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985#issuecomment-655789060
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] randall edited a comment on pull request #6985: Fixes use after free when boringssl is used
Posted by GitBox <gi...@apache.org>.
randall edited a comment on pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985#issuecomment-655789226
@zwoop This should go into 8.1.x and 9.x (and 8.0.x if there is a new version)
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] randall merged pull request #6985: Fixes use after free when boringssl is used
Posted by GitBox <gi...@apache.org>.
randall merged pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
[GitHub] [trafficserver] zwoop commented on pull request #6985: Fixes use after free when boringssl is used
Posted by GitBox <gi...@apache.org>.
zwoop commented on pull request #6985:
URL: https://github.com/apache/trafficserver/pull/6985#issuecomment-657715825
Cherry-picked to v9.0.x branch.
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
For queries about this service, please contact Infrastructure at:
users@infra.apache.org