[jira] [Created] (TS-3949) Active timeout event on PluginVC may fire after it's already closed.

["Sudheer Vinukonda (JIRA)" <ji...@apache.org>]

Sudheer Vinukonda created TS-3949:
-------------------------------------

             Summary: Active timeout event on PluginVC may fire after it's already closed.
                 Key: TS-3949
                 URL: https://issues.apache.org/jira/browse/TS-3949
             Project: Traffic Server
          Issue Type: Bug
          Components: Core, Plugins
            Reporter: Sudheer Vinukonda


When a plugin sets TS_EVENT_VCONN_ACTIVE_TIMEOUT on Plugin VC, it looks like, in some race conditions, the active timer event could still get fired after the Plugin VC is already closed, leading INKContInternal::handle_event to assert a use-after-free.

Note: The plugin VC's process_close does cancel the active timeout event, so, this doesn't happen every time. It might happen in some race conditions or when the timeout and close are on different threads (?)..



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)