From 7e3041b79f5b4ae90c1b61c4489f24c2b4d5efc7 Mon Sep 17 00:00:00 2001 From: Vladimir Homutov Date: Wed, 7 Nov 2018 13:22:14 +0300 Subject: [PATCH] Stream: fixed possible use of a freed connection. The session handler may result in session termination, thus a connection pool (from which c->udp was allocated) may be destroyed. --- src/event/ngx_event_udp.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/event/ngx_event_udp.c b/src/event/ngx_event_udp.c index 8b0ae5539..53b090475 100644 --- a/src/event/ngx_event_udp.c +++ b/src/event/ngx_event_udp.c @@ -261,7 +261,10 @@ ngx_event_recvmsg(ngx_event_t *ev) rev->handler(rev); - c->udp->buffer = NULL; + if (c->udp) { + c->udp->buffer = NULL; + } + rev->ready = 0; goto next; @@ -561,6 +564,8 @@ ngx_delete_udp_connection(void *data) ngx_connection_t *c = data; ngx_rbtree_delete(&c->listening->rbtree, &c->udp->node); + + c->udp = NULL; }