Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Attempt to fix use-after-free in tls_proxy CLI test #4148

Closed
wants to merge 21 commits into from

Conversation

reneme
Copy link
Collaborator

@reneme reneme commented Jun 24, 2024

This is just an attempt to reproduce on CI... I re-enabled the test on windows in the hope to increase the failure cross-section.

@reneme reneme added the bug label Jun 24, 2024
@reneme reneme added this to the Botan 3.5.0 milestone Jun 24, 2024
@reneme reneme self-assigned this Jun 24, 2024
@coveralls
Copy link

Coverage Status

coverage: 91.735% (-0.003%) from 91.738%
when pulling ac8be52 on Rohde-Schwarz:fix/tls_proxy_asan
into d24c2c3 on randombit:master.

@coveralls
Copy link

Coverage Status

coverage: 91.741% (+0.003%) from 91.738%
when pulling 974bafe on Rohde-Schwarz:fix/tls_proxy_asan
into d24c2c3 on randombit:master.

@coveralls
Copy link

Coverage Status

coverage: 91.733% (-0.005%) from 91.738%
when pulling 2d486ab on Rohde-Schwarz:fix/tls_proxy_asan
into d24c2c3 on randombit:master.

@coveralls
Copy link

Coverage Status

coverage: 91.739% (+0.001%) from 91.738%
when pulling 2d486ab on Rohde-Schwarz:fix/tls_proxy_asan
into d24c2c3 on randombit:master.

@coveralls
Copy link

Coverage Status

coverage: 91.741% (+0.003%) from 91.738%
when pulling 2d486ab on Rohde-Schwarz:fix/tls_proxy_asan
into d24c2c3 on randombit:master.

reneme added 7 commits July 2, 2024 14:57
If the TLS session to the client was established (when tls_session_activated()
was called), and the connection to the server was also established successfully
(ec in onConnect() callback was not set); but -- in the mean time -- the this-
pointer was deallocated via std::enable_shared_from_this, we end up in a use-
after free situation.

This sporadically apeeared in CI but wasn't reproducible locally, see randombit#4112.
@reneme reneme force-pushed the fix/tls_proxy_asan branch from 47f00c4 to 6baec20 Compare July 2, 2024 12:59
@reneme
Copy link
Collaborator Author

reneme commented Jul 4, 2024

Closing. Superseded by #4178, #4177 and #4181.

@reneme reneme closed this Jul 4, 2024
@reneme reneme deleted the fix/tls_proxy_asan branch July 4, 2024 13:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants