mirror of
http://git.haproxy.org/git/haproxy.git
synced 2026-02-12 13:42:52 +02:00
When mux->init() fails, session_free() will call it again to unregister it while it was already done, resulting in null derefs or use-after-free. This typically happens on out-of-memory conditions during H1 or H2 connection or stream allocation. This fix must be backported to 1.9.