Willy Tarreau 1b6c00cb99 BUG/MAJOR: ensure that hdr_idx is always reserved when L7 fetches are used ...

Baptiste Assmann reported a bug causing a crash on recent versions when
sticking rules were set on layer 7 in a TCP proxy. The bug is easier to
reproduce with the "defer-accept" option on the "bind" line in order to
have some contents to parse when the connection is accepted. The issue
is that the acl_prefetch_http() function called from HTTP fetches relies
on hdr_idx to be preinitialized, which is not the case if there is no L7
ACL.

The solution consists in adding a new SMP_CAP_L7 flag to fetches to indicate
that they are expected to work on L7 data, so that the proxy knows that the
hdr_idx has to be initialized. This is already how ACL and HTTP mode are
handled.

The bug was present since 1.5-dev9.

2012-10-05 22:46:09 +02:00

..

acl.h

MEDIUM: acl: support IPv6 address matching

2012-05-08 21:28:14 +02:00

arg.h

REORG: buffers: split buffers into chunk,buffer,channel

2012-09-03 20:47:32 +02:00

auth.h

[REORG] http: move the http-request rules to proto_http

2011-03-13 22:00:24 +01:00

backend.h

BUG/MAJOR: checks: don't call set_server_status_* when no LB algo is set

2012-05-19 19:09:46 +02:00

capture.h

…

channel.h

CLEANUP: frontend: remove the old proxy protocol decoder

2012-09-03 20:47:35 +02:00

checks.h

MINOR: checks: add on-marked-up option

2012-06-03 23:48:42 +02:00

connection.h

MEDIUM: connection: add a new local send-proxy transport callback

2012-10-05 00:32:35 +02:00

counters.h

[MINOR] stats: report the number of requests intercepted by the frontend

2011-09-10 23:32:41 +02:00

fd.h

CLEANUP: includes: fix includes for a number of users of fd.h

2012-09-03 20:49:14 +02:00

freq_ctr.h

…

global.h

MINOR: ssl: add defines LISTEN_DEFAULT_CIPHERS and CONNECT_DEFAULT_CIPHERS.

2012-10-05 22:11:15 +02:00

hdr_idx.h

…

lb_chash.h

…

lb_fas.h

MEDIUM: backend: add the 'first' balancing algorithm

2012-02-21 22:27:27 +01:00

lb_fwlc.h

…

lb_fwrr.h

…

lb_map.h

…

listener.h

MINOR: ssl: add 'force-sslv3' and 'force-tlsvXX' statements on bind.

2012-10-05 22:02:42 +02:00

log.h

REORG: buffers: split buffers into chunk,buffer,channel

2012-09-03 20:47:32 +02:00

peers.h

REORG: connection: rename the data layer the "transport layer"

2012-10-04 22:26:09 +02:00

pipe.h

…

port_range.h

…

proto_http.h

MEDIUM: http: add "redirect scheme" to ease HTTP to HTTPS redirection

2012-09-12 08:43:15 +02:00

proto_tcp.h

…

protocol.h

REORG: split "protocols" files into protocol and listener

2012-09-15 22:29:32 +02:00

proxy.h

BUG/MINOR: config: use a copy of the file name in proxy configurations

2012-10-04 08:13:32 +02:00

queue.h

…

sample.h

BUG/MAJOR: ensure that hdr_idx is always reserved when L7 fetches are used

2012-10-05 22:46:09 +02:00

server.h

MINOR: ssl: add 'force-sslv3' and 'force-tlsvXX' statements on server

2012-10-05 22:05:04 +02:00

session.h

MAJOR: session: introduce embryonic sessions

2012-09-03 20:47:35 +02:00

signal.h

…

ssl_sock.h

MEDIUM: ssl: add support for SNI and wildcard certificates

2012-09-10 09:27:02 +02:00

stick_table.h

[MEDIUM] IPv6 support for stick-tables

2011-03-29 01:09:14 +02:00

stream_interface.h

MAJOR: listeners: use dual-linked lists to chain listeners with frontends

2012-09-20 16:48:07 +02:00

task.h

…

template.h

…