nginx: b8e6297358b5

changeset 5565:b8e6297358b5 stable-1.4

SPDY: fixed possible segfault. While processing a DATA frame, the link to related stream is stored in spdy connection object as part of connection state. But this stream can be closed between receiving parts of the frame.

author Valentin Bartenev <vbart@nginx.com>

date Wed, 22 Jan 2014 04:58:19 +0400

parents 7e38aafc0342

children 70f4d99ded41

files src/http/ngx_http_spdy.c

diffstat

1 files changed, 4 insertions(+), 0 deletions(-) [+]

line wrap: on

line diff

--- a/src/http/ngx_http_spdy.c
+++ b/src/http/ngx_http_spdy.c
@@ -2626,6 +2626,10 @@ ngx_http_spdy_close_stream(ngx_http_spdy
         }
     }
 
+    if (sc->stream == stream) {
+        sc->stream = NULL;
+    }
+
     sscf = ngx_http_get_module_srv_conf(sc->http_connection->conf_ctx,
                                         ngx_http_spdy_module);