3party/libzmq
0
0
Fork 0
mirror of https://github.com/zeromq/libzmq.git synced 2025-03-12 17:12:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

Problem: use-after-free in WS

Browse Source 
Solution: bail out of the stream engine out_event if ws_engine raises
an error
This commit is contained in:
Luca Boccassi 2020-08-15 14:30:33 +01:00
parent 1412078db6
commit c733067d6d
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
src/stream_engine_base.cpp
View File

@ -344,8 +344,14 @@ void zmq::stream_engine_base_t::out_event ()
_outsize = _encoder->encode (&_outpos, 0);
while (_outsize < static_cast<size_t> (_options.out_batch_size)) {
if ((this->*_next_msg) (&_tx_msg) == -1)
break;
if ((this->*_next_msg) (&_tx_msg) == -1) {
// ws_engine can cause an engine error and delete it, so
// bail out immediately to avoid use-after-free
if (errno == ECONNRESET)
return;
else
break;
}
_encoder->load_msg (&_tx_msg);
unsigned char *bufptr = _outpos + _outsize;
const size_t n =