mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-09-21 05:41:26 +02:00
bdd863477d
The ->openssl_compat struct member of the QUIC connection object was not fully initialized. This was done on purpose, believing that ->write_level and ->read_level member was initialized by quic_tls_compat_keylog_callback() (the keylog callback) before entering quic_tls_compat_msg_callback() which has to parse the TLS messages. In fact this is not the case at all. quic_tls_compat_msg_callback() is called before quic_tls_compat_keylog_callback() when receiving the first TLS ClientHello message. ->write_level and ->read_level was not initialized to <ssl_encryption_initial> (= 0) as this is implicitely done by the originial ngxinx wrapper which calloc()s the openssl compatibily structure. This could lead to a crash after ssl_to_qel_addr() returns NULL when called by ha_quic_add_handshake_data(). This patch explicitely initialializes ->write_level and ->read_level to <ssl_encryption_initial> (=0). No need to backport.
The HAProxy documentation has been split into a number of different files for ease of use. Please refer to the following files depending on what you're looking for : - INSTALL for instructions on how to build and install HAProxy - BRANCHES to understand the project's life cycle and what version to use - LICENSE for the project's license - CONTRIBUTING for the process to follow to submit contributions The more detailed documentation is located into the doc/ directory : - doc/intro.txt for a quick introduction on HAProxy - doc/configuration.txt for the configuration's reference manual - doc/lua.txt for the Lua's reference manual - doc/SPOE.txt for how to use the SPOE engine - doc/network-namespaces.txt for how to use network namespaces under Linux - doc/management.txt for the management guide - doc/regression-testing.txt for how to use the regression testing suite - doc/peers.txt for the peers protocol reference - doc/coding-style.txt for how to adopt HAProxy's coding style - doc/internals for developer-specific documentation (not all up to date)